
This commit adds a tool which will run Bandit against the parent commit of a current branch, and then run Bandit in baseline mode using the parent's results as the baseline. Any options that are supplied to the script will be passed as options to Bandit (for example severity filters, targets, etc). By including this tool we can allow projects to run Bandit baseline as part of their existing tox jobs. Change-Id: Iaa1314aa348c7c5ca03c5c8b7dcfee456f279e56
9 lines
336 B
Plaintext
9 lines
336 B
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
appdirs>=1.3.0 # MIT License
|
|
GitPython>=1.0.1 # BSD License (3 clause)
|
|
PyYAML>=3.1.0
|
|
six>=1.9.0
|
|
stevedore>=1.5.0 # Apache-2.0
|