0e46d134c1
Pipenv is a tool that brings better package dependency management to python. It can automatically create and manage virtualenv as well as managing package dependencies using Pipfile and Pipfile.lock. Adding this dependency manager into Airship projects will decrease package version conflicts between projects and help increase security through hash validation of packages and vulnerability scans. Changes: - Imports requirements.txt type files into Pipfile - Pipenv dependency management in tox - Switches Safety package for "pipenv check", an implementation of Safety - Adds `-e` flag on VCS dependencies to resolve good versions on all packages - Unpins or loosens pins on "dev"-type packages Pipenv Docs: https://docs.pipenv.org/en/latest/ Helpful Pipenv Guide: https://realpython.com/pipenv-guide/ Change-Id: I47e7e7b440d76103b4984499e6ffce4482a59353
35 lines
978 B
TOML
35 lines
978 B
TOML
[[source]]
|
|
name = "pypi"
|
|
url = "https://pypi.org/simple"
|
|
verify_ssl = true
|
|
|
|
[dev-packages]
|
|
pytest = "*"
|
|
pytest-cov = "*"
|
|
testfixtures = "*"
|
|
pytest-xdist = "*"
|
|
requests = ">=2.20.0"
|
|
urllib3 = ">=1.24.3"
|
|
chardet = ">=3.0.4"
|
|
flake8 = "*"
|
|
yapf = ">=0.27.0"
|
|
hacking = ">=1.1.0"
|
|
flake8-import-order = ">=0.18.1"
|
|
bandit = ">=1.6.0"
|
|
docker = ">=3.7.2"
|
|
|
|
[packages]
|
|
click = ">=6.7"
|
|
jsonschema = "~=2.6.0"
|
|
cryptography = "~=2.3.1"
|
|
python-dateutil = "~=2.7.3"
|
|
GitPython = "~=2.1.11"
|
|
PyYAML = "~=5.1"
|
|
deckhand = {git = "https://opendev.org/airship/deckhand.git",ref = "a4850f8c4fc02dd1971282c6d9e4beb9cd5be320",editable = true}
|
|
shipyard-client = {git = "https://opendev.org/airship/shipyard.git",ref = "1472a22dce698ea77f15b007906b263eef470f52",subdirectory = "src/bin/shipyard_client",editable = true}
|
|
promenade = {git = "https://opendev.org/airship/promenade.git",ref = "89f9842b2ec428709a05fd0a8d4cd1796043375d",editable = true}
|
|
oslo-utils = "~=3.41.0"
|
|
|
|
[requires]
|
|
python_version = "3.6"
|