Run bandit when verifying changes