Merge "Enable bandit runs for tox"

2021-05-21 17:09:16 +00:00 · 2021-05-21 17:09:16 +00:00 · 30c0d286fe
parent 1b2e229542 eb566ce245
commit 30c0d286fe
2 changed files with 5 additions and 0 deletions
--- a/test-requirements.txt
+++ b/test-requirements.txt
@ -15,3 +15,4 @@ castellan>=3.7.0 # Apache-2.0
 pycodestyle==2.6.0 # MIT
 doc8>=0.8.1 # Apache-2.0
 fixtures>=3.0.0 # Apache-2.0/BSD
+bandit>=1.6.0,<1.7.0 # Apache-2.0
--- a/tox.ini
+++ b/tox.ini
@ -50,6 +50,10 @@ envdir = {toxworkdir}/pep8
 commands =
    {toxinidir}/tools/fast8.sh

+[testenv:bandit]
+deps = -r{toxinidir}/test-requirements.txt
+commands: bandit -r os_brick -x os_brick/tests -n5
+
 [testenv:pylint]
 deps =
       -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}