From cc7aabc12ef51809a115a5b27634affc4379b49a Mon Sep 17 00:00:00 2001 From: Eduardo Gonzalez Date: Thu, 6 Jul 2017 15:31:17 +0200 Subject: Add bandit check to all python code Bandit was not running in all directories due missing -r parameter. Also, this change fix bandit errors. * Add nosec to subprocess module * Change /tmp/releases to .releases * Change /tmp/ to tmp/, tmp/ is not checked and in unittest is not an issue, simpler that mocking tempfile and make more complex tests. Change-Id: I42bafa4707a9a4d1faeb01cb9b5a843f56280deb --- tox.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'tox.ini') diff --git a/tox.ini b/tox.ini index 8ec8962d8..05af3d118 100644 --- a/tox.ini +++ b/tox.ini @@ -36,7 +36,7 @@ commands = flake8 {posargs} {toxinidir}/tools/validate-all-dockerfiles.sh python {toxinidir}/tools/validate-all-file.py - bandit docker kolla tests tools + bandit -r docker kolla tests tools [testenv:bandit] commands = bandit -r docker kolla tests tools -- cgit v1.2.3