From 67513fc17c23066f6547b5e3c4ab2dc852e4f7f0 Mon Sep 17 00:00:00 2001 From: janonymous Date: Sat, 27 Jun 2015 23:26:47 +0530 Subject: Adding bandit for security static analysis testing in swift This change adds a basic bandit config for Swift. It can be invoked by running the tox environment for bandit; tox -e bandit This is an initial step for using bandit with Swift and it should be revisited to improve the testing as more is learned about the specific needs of the Swift code base.As per now some tests are excluded as they were used on purpose. https://wiki.openstack.org/wiki/Security/Projects/Bandit Implements: blueprint swift-bandit Change-Id: I621be9a68ae9311f3a6eadd1636b05e646260cf2 --- test-requirements.txt | 3 +++ 1 file changed, 3 insertions(+) (limited to 'test-requirements.txt') diff --git a/test-requirements.txt b/test-requirements.txt index b3f7eed5b..e8b3b42df 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,3 +13,6 @@ sphinx>=1.1.2,<1.2 mock>=1.0 python-swiftclient python-keystoneclient>=1.3.0 + +# Security checks +bandit>=0.10.1 -- cgit v1.2.1