openstack-helm/tools/gate
Gage Hugo 482dbcac29 Scan templated python files with bandit
This change adds a zuul check job to export any templated python
contained in the helm charts and scan it with bandit for any
potential security flaws.

This also adds two nosec comments on the instances of subprocess
used as they currently do not appear to be malicious, as well
as changing the endpoint_update python code to prevent sql
injection, which satisfies bandit code B608.

Change-Id: I2212d26514c3510353d16a4592893dd2e85cb369
2019-01-22 20:53:52 +00:00
..
files Scan templated python files with bandit 2019-01-22 20:53:52 +00:00
playbooks Scan templated python files with bandit 2019-01-22 20:53:52 +00:00