diff options
| author | Mark Goddard <mark@stackhpc.com> | 2019-05-09 14:28:21 +0100 |
|---|---|---|
| committer | Mark Goddard <mark@stackhpc.com> | 2019-05-09 15:18:17 +0000 |
| commit | e6387634c6a7170e96606b9a8ff680f08d81e801 (patch) | |
| tree | a53527cee839d452283ecf472e19e36a305e79c4 | |
| parent | 12740625cb858876249dbfb9d7dd802547085c9f (diff) | |
| download | kolla-e6387634c6a7170e96606b9a8ff680f08d81e801.tar.gz kolla-e6387634c6a7170e96606b9a8ff680f08d81e801.zip | |
Fix bandit failure B105 in keystone fernet
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: '/etc/keystone/fernet-keys'
Severity: Low Confidence: Medium
Location: docker/keystone/keystone-fernet/fetch_fernet_tokens.py:27
More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html
Ignore bandit failures on this line.
Change-Id: I9828c23e4bcec7553a69aa5f20e990e0ef0538ea
Closes-Bug: #1828416
| -rw-r--r-- | docker/keystone/keystone-fernet/fetch_fernet_tokens.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/docker/keystone/keystone-fernet/fetch_fernet_tokens.py b/docker/keystone/keystone-fernet/fetch_fernet_tokens.py index 7ef7be085..0f739e9bf 100644 --- a/docker/keystone/keystone-fernet/fetch_fernet_tokens.py +++ b/docker/keystone/keystone-fernet/fetch_fernet_tokens.py @@ -24,7 +24,8 @@ import json import os import sys -TOKEN_PATH = '/etc/keystone/fernet-keys' +# Adding nosec since this fails bandit B105, 'Possible hardcoded password'. +TOKEN_PATH = '/etc/keystone/fernet-keys' # nosec def json_exit(msg=None, failed=False, changed=False): |