summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTakashi Kajinami <tkajinam@redhat.com>2023-03-13 16:46:53 +0900
committerTakashi Kajinami <tkajinam@redhat.com>2023-03-13 18:15:56 +0900
commit6a4c7b57b8383bef4a02fb485e781c4cbb2a03d8 (patch)
treed55dbbd77afba451f0d71669b65b026b1df9a671
parent1daf06ff0da0cc684146d0c2bdfe555d6f814d74 (diff)
downloadheat-stable/2023.1.tar.gz
stable-only: Pin bandit to 1.7.420.0.0.0rc220.0.0stable/2023.1
bandit 1.7.5 introduced the new lint rule with which current heat code is not compliant. This pins bandit so that any new lint rule does not affect pep8 job in stable branches. Change-Id: Ie552e6398c10797e4df4afe757760c48ca7f80af
-rw-r--r--test-requirements.txt2
-rw-r--r--tox.ini6
2 files changed, 3 insertions, 5 deletions
diff --git a/test-requirements.txt b/test-requirements.txt
index bd3032139..62872ccaa 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -9,7 +9,7 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0
# care of pyflakes version compatibilty.
pyflakes>=2.1.1
-bandit!=1.6.0,>=1.1.0 # Apache-2.0
+bandit!=1.6.0,>=1.1.0,<1.7.5 # Apache-2.0
coverage!=4.4,>=4.0 # Apache-2.0
fixtures>=3.0.0 # Apache-2.0/BSD
kombu!=4.0.2,>=5.0.1 # BSD
diff --git a/tox.ini b/tox.ini
index b3785897d..12343295c 100644
--- a/tox.ini
+++ b/tox.ini
@@ -30,7 +30,6 @@ commands =
# B104: Test for binding to all interfaces
# B107: Test for use of hard-coded password argument defaults
# B110: Try, Except, Pass detected.
- # B113: Requests call without timeout
# B310: Audit url open for permitted schemes
# B311: Standard pseudo-random generators are not suitable for security/cryptographic purposes
# B404: Import of subprocess module
@@ -39,7 +38,7 @@ commands =
# B506: Test for use of yaml load
# B603: Test for use of subprocess with shell equals true
# B607: Test for starting a process with a partial path
- bandit -r heat -x tests --skip B101,B104,B107,B110,B113,B310,B311,B404,B410,B504,B506,B603,B607
+ bandit -r heat -x tests --skip B101,B104,B107,B110,B310,B311,B404,B410,B504,B506,B603,B607
doc8 {posargs}
[testenv:venv]
@@ -101,7 +100,6 @@ deps =
# B104: Test for binding to all interfaces
# B107: Test for use of hard-coded password argument defaults
# B110: Try, Except, Pass detected.
-# B113: Requests call without timeout
# B310: Audit url open for permitted schemes
# B311: Standard pseudo-random generators are not suitable for security/cryptographic purposes
# B404: Import of subprocess module
@@ -110,7 +108,7 @@ deps =
# B506: Test for use of yaml load
# B603: Test for use of subprocess with shell equals true
# B607: Test for starting a process with a partial path
-commands = bandit -r heat -x tests --skip B101,B104,B107,B110,B113,B310,B311,B404,B410,B504,B506,B603,B607
+commands = bandit -r heat -x tests --skip B101,B104,B107,B110,B310,B311,B404,B410,B504,B506,B603,B607
[flake8]
show-source = true