838768c76e
The -x option for bandit changed in 1.6.0 and now supports glob patterns so use that to correctly exclude test code from bandit scans. Since this change requires bandit>=1.6.0, we have to also fix the networkx requirement to pass the requirements-check job so that the networkx requirement matches what is in global-requirements from change I0a9700926c9a0db93e782c853c33f1aaee3d4876. Change-Id: I4fc1166daee5d8739296419216d11d684be27c0a Closes-Bug: #1828419
17 lines
553 B
Plaintext
17 lines
553 B
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
|
|
coverage>=4.5.1 # Apache-2.0
|
|
doc8>=0.8.0 # Apache-2.0
|
|
freezegun>=0.3.10 # Apache-2.0
|
|
hacking>=1.1.0,<1.2.0 # Apache-2.0
|
|
mock>=2.0.0 # BSD
|
|
oslotest>=3.3.0 # Apache-2.0
|
|
os-testr>=1.0.0 # Apache-2.0
|
|
testscenarios>=0.5.0 # Apache-2.0/BSD
|
|
testtools>=2.3.0 # MIT
|
|
stestr>=2.0.0 # Apache-2.0
|
|
os-api-ref>=1.4.0 # Apache-2.0
|
|
bandit>=1.6.0 # Apache-2.0
|