Incorporate bandit support in CI

Code Issues Proposed changes

Change-Id: I2144c284ffcfa696412fca30f59a66c54c3d1965
Story: 2005791
Task: 33564

This commit is contained in:

Kaifeng Wang

2019年06月03日 15:44:02 +08:00

parent 257d6f7d32

commit 3352d40907

5 changed files with 26 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1
lower-constraints.txt

View File

@@ -2,6 +2,7 @@ alabaster==0.7.10

appdirs==1.4.3

Babel==2.5.3

bashate==0.5.1

bandit==1.1.0

beautifulsoup4==4.6.0

certifi==2018年1月18日

chardet==3.0.4

1
test-requirements.txt

View File

@@ -9,6 +9,7 @@ oslotest>=3.2.0 # Apache-2.0

stestr>=1.0.0 # Apache-2.0

bashate>=0.5.1 # Apache-2.0

flake8-import-order>=0.13 # LGPLv3

bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0

# Doc requirements

doc8>=0.6.0 # Apache-2.0

5
tox.ini

View File

@@ -114,3 +114,8 @@ deps =

-c{toxinidir}/lower-constraints.txt

-r{toxinidir}/test-requirements.txt

-r{toxinidir}/requirements.txt

[testenv:bandit]

basepython = python3

deps = -r{toxinidir}/test-requirements.txt

commands = bandit -r ironic_python_agent -x tests -n5 -ll

17
zuul.d/ironic-python-agent-jobs.yaml

View File

@@ -142,3 +142,20 @@

s-container:True

s-object:True

s-proxy:True

- job:

# Security testing for known issues

name:ipa-tox-bandit

parent:openstack-tox

timeout:2400

vars:

tox_envlist:bandit

irrelevant-files:

- ^test-requirements.txt$

- ^.*\.rst$

- ^doc/.*$

- ^ironic_python_agent/tests/.*$

- ^releasenotes/.*$

- ^setup.cfg$

- ^tools/.*$

- ^tox.ini$

2
zuul.d/project.yaml

View File

@@ -28,6 +28,8 @@

- openstack-tox-functional:

voting:false

- openstack-tox-lower-constraints

- ipa-tox-bandit:

voting:false

gate:

queue:ironic

jobs: