summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBrant Knudson <bknudson@us.ibm.com>2016-01-13 15:55:41 -0600
committerBrant Knudson <bknudson@us.ibm.com>2016-01-27 15:50:54 -0600
commit2f20c24cd46e123e6ff366def21386cdb3502d85 (patch)
tree2a00c493dbda6b1e9953c1df88deb536e3dadef1
parenta02d7962692eb673bcfa3ce5a5ec9fa4c7952410 (diff)
downloadpython-keystoneclient-2f20c24cd46e123e6ff366def21386cdb3502d85.tar.gz
Bandit profile updates
We'd like to use the same "gate" profile for all OpenStack gate jobs, so the "keystone_conservative" profile which we were running as part of the gate is change to "gate. The other profiles that aren't used as part of the gate are removed. Change-Id: I931dc957b4659806027d45dfec5e61e9c7973564
-rw-r--r--bandit.yaml17
-rw-r--r--tox.ini2
2 files changed, 2 insertions, 17 deletions
diff --git a/bandit.yaml b/bandit.yaml
index 89d2551..1f2f68e 100644
--- a/bandit.yaml
+++ b/bandit.yaml
@@ -29,7 +29,7 @@ exclude_dirs:
- '/tests/'
profiles:
- keystone_conservative:
+ gate:
include:
- blacklist_calls
- blacklist_imports
@@ -40,21 +40,6 @@ profiles:
- linux_commands_wildcard_injection
- ssl_with_bad_version
-
- keystone_verbose:
- include:
- - blacklist_calls
- - blacklist_imports
- - request_with_no_cert_validation
- - exec_used
- - set_bad_file_permissions
- - hardcoded_tmp_directory
- - subprocess_popen_with_shell_equals_true
- - any_other_function_with_shell_equals_true
- - linux_commands_wildcard_injection
- - ssl_with_bad_version
- - ssl_with_bad_defaults
-
blacklist_calls:
bad_name_sets:
- pickle:
diff --git a/tox.ini b/tox.ini
index f34c902..d1b4b7a 100644
--- a/tox.ini
+++ b/tox.ini
@@ -19,7 +19,7 @@ whitelist_externals = find
[testenv:linters]
commands =
flake8
- bandit -c bandit.yaml -r keystoneclient -n5 -p keystone_conservative
+ bandit -c bandit.yaml -r keystoneclient -n5 -p gate
[testenv:pep8]
whitelist_externals =