Fix bandit runs with 1.6.0

The -x option for bandit changed in 1.6.0 and now
supports glob patterns so use that to correctly
exclude test code from bandit scans.

Since this change requires bandit>=1.6.0, we have
to also fix the networkx requirement to pass the
requirements-check job so that the networkx requirement
matches what is in global-requirements from change
I0a9700926c9a0db93e782c853c33f1aaee3d4876.

Change-Id: I4fc1166daee5d8739296419216d11d684be27c0a
Closes-Bug: #1828419
This commit is contained in:
Matt Riedemann
2019-05-09 10:02:44 -04:00
parent e2285777e2
commit 838768c76e
3 changed files with 6 additions and 4 deletions

View File

@@ -13,4 +13,4 @@ testscenarios>=0.5.0 # Apache-2.0/BSD
testtools>=2.3.0 # MIT
stestr>=2.0.0 # Apache-2.0
os-api-ref>=1.4.0 # Apache-2.0
bandit>=1.1.0 # Apache-2.0
bandit>=1.6.0 # Apache-2.0