From ae9e67388706e57561531652145ba187f8870b94 Mon Sep 17 00:00:00 2001
From: Kenneth Giusti <kgiusti@gmail.com>
Date: Wed, 13 Jun 2018 16:19:28 -0400
Subject: Fix the bandit security linter test

Add the bandit security linter test to the pep8 target

Change-Id: I9324b9d9df77fd05c2e10bb48d7ccf8b4c634525
---
 tox.ini | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

(limited to 'tox.ini')

diff --git a/tox.ini b/tox.ini
index c6ce87a..5465358 100644
--- a/tox.ini
+++ b/tox.ini
@@ -1,6 +1,6 @@
 [tox]
 minversion = 2.0
-envlist = py35,py27,pep8,bandit
+envlist = py35,py27,pep8
 
 [testenv]
 setenv =
@@ -17,8 +17,10 @@ commands = python setup.py testr --slowest --testr-args='{posargs}'
 
 [testenv:pep8]
 basepython = python3
-commands = flake8
-deps = hacking<0.11,>=0.10.0
+commands =
+  flake8
+  # run security linter
+  bandit -r oslo_messaging -x tests,_drivers/zmq_driver,_drivers/impl_zmq.py -n5
 
 [testenv:cover]
 basepython = python3
@@ -104,13 +106,13 @@ commands = {toxinidir}/setup-test-env-zmq-proxy.sh python setup.py testr --slowe
 basepython = python2.7
 commands = {toxinidir}/setup-test-env-zmq-pub-sub.sh python setup.py testr --slowest --testr-args='{posargs:oslo_messaging.tests.functional}'
 
+
 [testenv:bandit]
+# NOTE(kgiusti): This is required for the integration test job of the bandit
+# project. Please do not remove.
 basepython = python3
-deps =
-  -c{env:UPPER_CONSTRAINTS_FILE:https://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt}
-  -r{toxinidir}/test-requirements.txt
-  -r{toxinidir}/requirements.txt
-commands = bandit -r oslo_messaging -x tests -n5
+# skip ZeroMQ - it is deprecated
+commands = bandit -r oslo_messaging -x tests,_drivers/zmq_driver,_drivers/impl_zmq.py -n5
 
 [flake8]
 show-source = True
-- 
cgit v1.2.1