Bandit profile updates
We'd like to use the same "gate" profile for all OpenStack gate jobs, so the "keystone_conservative" profile which we were running as part of the gate is change to "gate. The other profiles that aren't used as part of the gate are removed. Change-Id: I931dc957b4659806027d45dfec5e61e9c7973564
This commit is contained in:
17
bandit.yaml
17
bandit.yaml
@@ -29,7 +29,7 @@ exclude_dirs:
|
||||
- '/tests/'
|
||||
|
||||
profiles:
|
||||
keystone_conservative:
|
||||
gate:
|
||||
include:
|
||||
- blacklist_calls
|
||||
- blacklist_imports
|
||||
@@ -40,21 +40,6 @@ profiles:
|
||||
- linux_commands_wildcard_injection
|
||||
- ssl_with_bad_version
|
||||
|
||||
|
||||
keystone_verbose:
|
||||
include:
|
||||
- blacklist_calls
|
||||
- blacklist_imports
|
||||
- request_with_no_cert_validation
|
||||
- exec_used
|
||||
- set_bad_file_permissions
|
||||
- hardcoded_tmp_directory
|
||||
- subprocess_popen_with_shell_equals_true
|
||||
- any_other_function_with_shell_equals_true
|
||||
- linux_commands_wildcard_injection
|
||||
- ssl_with_bad_version
|
||||
- ssl_with_bad_defaults
|
||||
|
||||
blacklist_calls:
|
||||
bad_name_sets:
|
||||
- pickle:
|
||||
|
Reference in New Issue
Block a user