keystone/keystone/tests/unit/credential
lhinds 76bd54d491 Adds Bandit #nosec flag to instances of SHA1
Currently, bandit marks usages of SHA1 as insecure, which
results in false positives for instances of SHA1 in keystone.
However, keystone uses HMAC-SHA1 which is currently considered
secure as opposed to just SHA1 hashing.

This change marks a # nosec comment against the lines which
are triggering the false positives in Bandit in order to
tell bandit to avoid these instances of SHA1.

See [1] for HMAC-SHA1 discussion in keystone

[1] https://review.openstack.org/#/c/453365/

Change-Id: Ibb44db1f8727d014d186b412106d0cd4e2f4a6dd
2017-09-07 14:01:35 -05:00
..
__init__.py Create a fernet credential provider 2016-08-18 16:07:13 +00:00
test_backend_sql.py Remove unused CONF 2017-04-22 15:22:05 +08:00
test_fernet_provider.py Adds Bandit #nosec flag to instances of SHA1 2017-09-07 14:01:35 -05:00