openstack/python-neutronclient
Code Issues Proposed changes

Add bandit to pep8 gate

Browse Source 
Neutron uses bandit to detect security issues. This patch adds bandit
to the pep8 gate to automatically lint for security issues in
python-neutronclient.

Change-Id: Ifd8caf65cc89e7d6d6ebc8f58539741cfbab839b
This commit is contained in:
jessegler
2018-06-13 15:05:52 -05:00
parent d090ea2751
commit 834ad176ea
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
test-requirements.txt
View File

@@ -3,6 +3,7 @@
# process, which may cause wedges in the gate later. # process, which may cause wedges in the gate later.
hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0
bandit>=1.1.0 # Apache-2.0
coverage!=4.4,>=4.0 # Apache-2.0 coverage!=4.4,>=4.0 # Apache-2.0
fixtures>=3.0.0 # Apache-2.0/BSD fixtures>=3.0.0 # Apache-2.0/BSD
flake8-import-order==0.12 # LGPLv3 flake8-import-order==0.12 # LGPLv3

8
tox.ini
View File

@@ -25,7 +25,9 @@ commands = sh -c "find . -type d -name '.?*' -prune -o \
whitelist_externals = sh whitelist_externals = sh
[testenv:pep8] [testenv:pep8]
commands = flake8 commands =
flake8
{[testenv:bandit]commands}
distribute = false distribute = false
[testenv:venv] [testenv:venv]
@@ -62,6 +64,10 @@ import-order-style = pep8
# H904: Delay string interpolations at logging calls # H904: Delay string interpolations at logging calls
enable-extensions=H904 enable-extensions=H904
[testenv:bandit]
deps = -r{toxinidir}/test-requirements.txt
commands = bandit -r neutronclient -x tests -n5
[testenv:lower-constraints] [testenv:lower-constraints]
basepython = python3 basepython = python3
deps = deps =