505659b0aa
This change is being proposed as part of the OpenStack Security Project working session at the Austin 2016 summit. It adds support for running the bandit[1] security linting tool against the python-openstackclient codebase. This change adds a targetted environment for bandit and also adds bandit as part of the pep8 job. The bandit configuration has been tailored to exclude tests that are currently producing warning against the codebase. These issues will be followed up with bug reports and patches. [1]: https://wiki.openstack.org/wiki/Security/Projects/Bandit Depends-On: Iccd81c17e84df03d249c1012277dad9cb68c5845 Change-Id: I691829c1224557d1d239c9f665ac539d0f13c4d3
35 lines
1.2 KiB
Plaintext
35 lines
1.2 KiB
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
hacking<0.11,>=0.10.0
|
|
|
|
coverage>=3.6 # Apache-2.0
|
|
discover # BSD
|
|
fixtures<2.0,>=1.3.1 # Apache-2.0/BSD
|
|
mock>=1.2 # BSD
|
|
oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0
|
|
oslotest>=1.10.0 # Apache-2.0
|
|
reno>=1.6.2 # Apache2
|
|
requests-mock>=0.7.0 # Apache-2.0
|
|
sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD
|
|
os-testr>=0.4.1 # Apache-2.0
|
|
testrepository>=0.0.18 # Apache-2.0/BSD
|
|
testtools>=1.4.0 # MIT
|
|
tempest-lib>=0.14.0 # Apache-2.0
|
|
osprofiler>=1.3.0 # Apache-2.0
|
|
bandit>=1.0.1 # Apache-2.0
|
|
|
|
# Install these to generate sphinx autodocs
|
|
python-barbicanclient>=4.0.0 # Apache-2.0
|
|
python-congressclient<2000,>=1.0.0 # Apache-2.0
|
|
python-designateclient>=1.5.0 # Apache-2.0
|
|
python-heatclient>=0.6.0 # Apache-2.0
|
|
python-ironicclient>=1.1.0 # Apache-2.0
|
|
python-ironic-inspector-client>=1.5.0 # Apache-2.0
|
|
python-mistralclient>=1.0.0 # Apache-2.0
|
|
python-muranoclient>=0.8.2 # Apache-2.0
|
|
python-saharaclient>=0.13.0 # Apache-2.0
|
|
python-searchlightclient>=0.2.0 #Apache-2.0
|
|
python-senlinclient>=0.3.0 # Apache-2.0
|
|
python-zaqarclient>=1.0.0 # Apache-2.0
|