Fix bandit and sphinx requirements for stable branches
This is a combination of 2 commits. 1st commit: Update Sphinx requirement Sphinx 2.0 no longer works on python 2.7, so we need to start capping it there as well. 2nd commit: Fix bandit runs with 1.6.0 The -x option for bandit changed in 1.6.0 and now supports glob patterns so use that to correctly exclude test code from bandit scans. Change-Id: I588d3fb02ef61623affd82a43a54585aba0cb5f9
This commit is contained in:
4
tox.ini
4
tox.ini
@@ -22,7 +22,7 @@ basepython = python3
|
||||
commands =
|
||||
doc8 doc/source/ CONTRIBUTING.rst HACKING.rst README.rst
|
||||
flake8
|
||||
bandit -r watcher -x tests -n5 -ll -s B320
|
||||
bandit -r watcher -x watcher/tests/* -n5 -ll -s B320
|
||||
|
||||
[testenv:venv]
|
||||
basepython = python3
|
||||
@@ -98,7 +98,7 @@ commands = sphinx-build -a -W -E -d releasenotes/build/doctrees -b html releasen
|
||||
[testenv:bandit]
|
||||
basepython = python3
|
||||
deps = -r{toxinidir}/test-requirements.txt
|
||||
commands = bandit -r watcher -x tests -n5 -ll -s B320
|
||||
commands = bandit -r watcher -x watcher/tests/* -n5 -ll -s B320
|
||||
|
||||
[testenv:lower-constraints]
|
||||
basepython = python3
|
||||
|
||||
Reference in New Issue
Block a user