Add bandit check to all python code

Bandit was not running in all directories
due missing -r parameter.

Also, this change fix bandit errors.
* Add nosec to subprocess module
* Change /tmp/releases to .releases
* Change /tmp/ to tmp/, tmp/ is not checked
  and in unittest is not an issue, simpler that mocking tempfile
  and make more complex tests.

Change-Id: I42bafa4707a9a4d1faeb01cb9b5a843f56280deb

1 files changed, 1 insertions, 1 deletions

diff --git a/tox.ini b/tox.ini
index 8ec8962d8..05af3d118 100644
--- a/tox.ini
+++ b/tox.ini
@@ -36,7 +36,7 @@ commands =
   flake8 {posargs}
   {toxinidir}/tools/validate-all-dockerfiles.sh
   python {toxinidir}/tools/validate-all-file.py
-  bandit docker kolla tests tools
+  bandit -r docker kolla tests tools
 
 [testenv:bandit]
 commands = bandit -r docker kolla tests tools