The plan is to add Bandit to the commit gate. Bandit is
produced by the OpenStack security team to do static code
analysis for security implementation failures. It tests
the code base for ~30 common security problems in Python
with more to come. The bandit.yaml configuration file
is set to the value recommended by the Bandit team.
run with:
tox -e bandit
Change-Id: I46cde803119d0162b6256346e423079cadac17cb
Partially-Implements: blueprint gate-bandit
2 lines
15 B
Plaintext
2 lines
15 B
Plaintext
bandit==0.10.0
|