Run bandit when verifying changes 47/67947/4
authorCédric Ollivier <cedric.ollivier@orange.com>
Sat, 25 May 2019 09:03:40 +0000 (11:03 +0200)
committerCédric Ollivier <cedric.ollivier@orange.com>
Sat, 25 May 2019 09:30:22 +0000 (11:30 +0200)
commit056c6235eefab5582c3a6803aa9a3cdea2c0c894
tree207e04d98252ecb2f2961b8b20f86ae562eba79f
parentee33658a4b4ce3c556f4a0be986c080fcfe4cb93
Run bandit when verifying changes

It reports only MEDIUM issues or higher like nova [1].
It selects bandit 1.1.0 as defined in nova and neutron lower
constraints [2].

[1] https://github.com/openstack/nova/blob/master/tox.ini#L221
[2] https://github.com/openstack/nova/blob/master/lower-constraints.txt#L8

Change-Id: I52524df867d99fae75798475c762a5f8253dacfa
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
(cherry picked from commit c659caccbf1f55db4e6e3cb31bf088ac57751e86)
test-requirements.txt
tox.ini
upper-constraints.txt