Bandit baseline will check the last commit to see if it introduced any new security problems. Details of how bandit can be configured for the gate are documented here: https://wiki.openstack.org/wiki/Security/Projects/Bandit#Gate_Testing_with_Bandit Change-Id: I791d897c4efe00bc4c0fd3b9d249e561eeb82acb Partial-Bug: #1552002
18 lines
619 B
Plaintext
18 lines
619 B
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
hacking<0.10,>=0.9.1
|
|
requests-mock>=0.7.0 # Apache-2.0
|
|
coverage>=3.6 # Apache-2.0
|
|
mock>=1.2 # BSD
|
|
pyroute2>=0.3.10 # Apache-2.0 (+ dual licensed GPL2)
|
|
python-subunit>=0.0.18 # Apache-2.0/BSD
|
|
oslotest>=1.10.0 # Apache-2.0
|
|
testrepository>=0.0.18 # Apache-2.0/BSD
|
|
testtools>=1.4.0 # MIT
|
|
testresources>=0.2.4 # Apache-2.0/BSD
|
|
WebTest>=2.0 # MIT
|
|
doc8 # Apache-2.0
|
|
reno>=0.1.1 # Apache2
|
|
bandit>=0.17.3 # Apache-2.0
|