Merge "Adds Safety dependency vulnerability checks"

This commit is contained in:
Zuul 2019-06-06 21:19:26 +00:00 committed by Gerrit Code Review
commit 4d3e9d171b
2 changed files with 9 additions and 0 deletions

View File

@ -13,3 +13,4 @@ hacking==1.1.0
# Security # Security
bandit==1.6.0 bandit==1.6.0
safety==1.8.5

View File

@ -35,6 +35,7 @@ deps =
commands = commands =
bash -c "{toxinidir}/tools/gate/whitespace-linter.sh" bash -c "{toxinidir}/tools/gate/whitespace-linter.sh"
bandit -r pegleg -n 5 bandit -r pegleg -n 5
safety check -r requirements.txt --bare
flake8 {toxinidir}/pegleg flake8 {toxinidir}/pegleg
whitelist_externals = whitelist_externals =
bash bash
@ -53,6 +54,13 @@ whitelist_externals =
basepython = python3 basepython = python3
commands = bandit -r pegleg -n 5 commands = bandit -r pegleg -n 5
[testenv:safety]
deps =
safety
commands =
safety check -r {toxinidir}/requirements.txt --full-report
safety check -r {toxinidir}/test-requirements.txt --full-report
[testenv:cover] [testenv:cover]
basepython = python3 basepython = python3
deps = deps =