Implement bandit static security scan

.github/workflows/checks.yml

@@ -74,3 +74,13 @@ jobs:
         with:
           inputs: requirements.txt requirements_for_test.txt
           ignore-vulns: PYSEC-2022-237
+
+  static-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: ./.github/actions/setup-project
+      - name: Install bandit
+        run: pip install bandit
+      - name: Run scan
+        run: bandit -r app/ --confidence-level medium