Fix bandit errors

Bandit 1.6.0 changes the behavior of the '-x' option so that it now
supports glob patterns. Update our tox file to use to correctly exclude
test code from bandit scans. This requires bumping our minimum bandit version.

As an aside, changing the behavior of an option like this in a minor
version if bad form :(

Change-Id: I11bee26373ea9894b47d7f964eac88ef70859732
This commit is contained in:
Hervé Beraud 2019-05-13 13:04:23 +02:00
parent fe8ad58605
commit e0a91426af
1 changed files with 2 additions and 2 deletions

View File

@ -74,12 +74,12 @@ commands =
yapf -dr {toxinidir}/armada {toxinidir}/setup.py
flake8 {posargs}
# Run security linter as part of the pep8 gate instead of a separate zuul job.
bandit -r armada -x armada/tests -n 5
bandit -r armada -n 5 -x armada/tests/*
[testenv:bandit]
basepython = python3
commands =
bandit -r armada -x armada/tests -n 5
bandit -r armada -n 5 -x armada/tests/*
[testenv:cover]
basepython = python3