The idea is to make the codebase gate on Bandit. Bandit is
produced by the OpenStack security team to do static code
analysis for security implementation failures. It tests
the code base for ~30 common security problems in Python
with more to come.
run with:
tox -e bandit
Partially-Implements: blueprint gate-bandit
Change-Id: Iade9936268a539384d6067104f02f9a9001c3627
4.9 KiB
4.9 KiB