horizon/.zuul.yaml
Ivan Kolodyazhny fe4a1f4051 Add Bandit non-voting job
This commit adds two new tox environments for bandit scanner. To run any
of them you can use tox commands:

1) 'tox -e bandit' to run bandit scanner against all the code
2) 'tox -e bandit-baseline' to run bandit scanner only against the last
commit or the current changes.

Bandit job uses 'bandit-baseline' tox environment to veryfy that no new
issues were introduced.

Change-Id: I1fc3bb0d5d151f215b9efc916f921fabaa72e7d8
2018-06-22 13:11:43 +03:00

93 lines
2.4 KiB
YAML

- job:
name: horizon-openstack-tox-base
parent: openstack-tox
irrelevant-files:
- ^.*\.rst$
- ^doc/.*$
- ^releasenotes/.*$
- ^horizon/locale/.*$
- ^openstack_dashboard/locale/.*$
- ^openstack_auth/locale/.*$
- job:
name: horizon-openstack-tox-py35dj20
parent: horizon-openstack-tox-base
vars:
tox_envlist: py35dj20
- job:
name: horizon-openstack-tox-python3-django111
parent: horizon-openstack-tox-base
vars:
tox_envlist: py3-dj111
required-projects:
- name: openstack/horizon
- job:
name: horizon-selenium-headless
parent: horizon-openstack-tox-base
pre-run: playbooks/horizon-selenium-headless/pre.yaml
vars:
tox_envlist: selenium-headless
- job:
name: horizon-dsvm-tempest-plugin
parent: devstack-tempest
required-projects:
- name: openstack/horizon
- name: openstack/tempest
- name: openstack/tempest-horizon
irrelevant-files:
- ^.*\.rst$
- ^doc/.*$
- ^releasenotes/.*$
- ^horizon/locale/.*$
- ^openstack_dashboard/locale/.*$
- ^openstack_auth/locale/.*$
# Test codes are not related to tempest tests
# as tempest is defined in a separete repository
- ^horizon/test/.*$
- ^openstack_auth/tests/.*$
- ^openstack_dashboard/test/.*$
- ^openstack_dashboard/dashboards/.*/tests.py$
vars:
devstack_localrc:
TEMPEST_PLUGINS: "'{{ ansible_user_dir }}/src/git.openstack.org/openstack/tempest-horizon'"
devstack_services:
horizon: true
tempest: true
tempest_concurrency: 2
tempest_test_regex: horizon
tox_envlist: all
- job:
# Security testing for known issues
name: horizon-tox-bandit-baseline
parent: openstack-tox
timeout: 2400
vars:
tox_envlist: bandit-baseline
irrelevant-files:
- ^.*\.rst$
- ^.*\locale/.*$
- ^doc/.*$
- ^releasenotes/.*$
- ^setup.cfg$
- ^tools/.*$
- project:
check:
jobs:
- horizon-openstack-tox-python3-django111
- horizon-selenium-headless:
voting: false
- horizon-dsvm-tempest-plugin
- openstack-tox-lower-constraints
- horizon-tox-bandit-baseline:
voting: false
gate:
jobs:
- horizon-openstack-tox-python3-django111
- horizon-dsvm-tempest-plugin
- openstack-tox-lower-constraints