From b080843706c816a5e47b638f7a39b960a6671e41 Mon Sep 17 00:00:00 2001 From: Rodolfo Alonso Hernandez Date: Thu, 3 Mar 2022 00:24:33 +0000 Subject: [PATCH] Skip B105 pep8 error: hardcoded passwords Skip B105 pep8 error: * https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html * https://cwe.mitre.org/data/definitions/259.html Trivial-Fix Change-Id: I8e58da2d88d727018c8d5af5949e34f8c0893c1f (cherry picked from commit 28628e8f962c49aa276647ca2b2e71a2be530277) --- tox.ini | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/tox.ini b/tox.ini index 8e7aa1673..9136a0f9e 100644 --- a/tox.ini +++ b/tox.ini @@ -81,8 +81,11 @@ enable-extensions=H904 [testenv:bandit] # B303: blacklist calls: md5, sha1 +# B105: The software contains a hard-coded password, which it uses for its own +# inbound authentication or for outbound communication to external +# components. deps = -r{toxinidir}/test-requirements.txt -commands = bandit -r neutronclient -x tests -n5 -s B303 +commands = bandit -r neutronclient -x tests -n5 -s B303,B105 [testenv:lower-constraints] deps =