e09c00d44f
Run security linter bandit as part of pep8. Pep8 is the usual linter target and thus let's use it there instead of starting another node for this short-running job. Move bandit requirement to test-requirements. Disable temporarily some tests in bandit.yaml since they advocate using defusedxml which is not in global-requirements.txt and thus cannot be used inside bandit (bug#1550161). Change-Id: Ie3c9f4ee6e061ea090fa882f4f029f2761706951
36 lines
1.1 KiB
Plaintext
36 lines
1.1 KiB
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
|
|
# Hacking already pins down pep8, pyflakes and flake8
|
|
hacking<0.11,>=0.10.0
|
|
|
|
# For translations processing
|
|
Babel>=1.3 # BSD
|
|
|
|
# Needed for testing
|
|
bandit>=0.17.3 # Apache-2.0
|
|
coverage>=3.6 # Apache-2.0
|
|
fixtures>=1.3.1 # Apache-2.0/BSD
|
|
mox3>=0.7.0 # Apache-2.0
|
|
mock>=1.2 # BSD
|
|
sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD
|
|
requests!=2.9.0,>=2.8.1 # Apache-2.0
|
|
testrepository>=0.0.18 # Apache-2.0/BSD
|
|
testresources>=0.2.4 # Apache-2.0/BSD
|
|
testscenarios>=0.4 # Apache-2.0/BSD
|
|
testtools>=1.4.0 # MIT
|
|
psutil<2.0.0,>=1.1.1 # BSD
|
|
oslotest>=1.10.0 # Apache-2.0
|
|
# Optional packages that should be installed when testing
|
|
PyMySQL>=0.6.2 # MIT License
|
|
psycopg2>=2.5 # LGPL/ZPL
|
|
pysendfile>=2.0.0 # MIT
|
|
qpid-python;python_version=='2.7' # Apache-2.0
|
|
xattr>=0.4 # MIT
|
|
python-swiftclient>=2.2.0 # Apache-2.0
|
|
|
|
# Documentation
|
|
oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0
|
|
reno>=0.1.1 # Apache2
|