561cba9003
Bandit check is a very important tool to check code security. Before this patch, we put it as a non-voting job to temporarily ignore existed bandit failures. After fixed all the existed bandit failures, we should change this test job from non-voting to voting to make the bandit job actually work, that is to let zuul do the bandit check for all patches and give them zuul -1 once the new changes fail to pass bandit the check. Depends-On: https://review.opendev.org/#/c/720475 Depends-On: https://review.opendev.org/#/c/720456 Depends-On: https://review.opendev.org/#/c/720149 Depends-On: https://review.opendev.org/#/c/720143 Change-Id: I8480243382f66779a12b1e433b69d9be512e843e
39 lines
880 B
YAML
39 lines
880 B
YAML
- project:
|
|
templates:
|
|
- openstack-cover-jobs
|
|
- check-requirements
|
|
- release-notes-jobs-python3
|
|
- openstack-python3-ussuri-jobs
|
|
- publish-openstack-docs-pti
|
|
check:
|
|
jobs:
|
|
- cyborg-tempest
|
|
- cyborg-tempest-ipv6-only
|
|
- cyborg-tox-bandit
|
|
gate:
|
|
jobs:
|
|
- cyborg-tempest
|
|
|
|
- job:
|
|
name: cyborg-tox-bandit
|
|
parent: openstack-tox
|
|
timeout: 2400
|
|
vars:
|
|
tox_envlist: bandit
|
|
required-projects:
|
|
- openstack/requirements
|
|
irrelevant-files: &gate-irrelevant-files
|
|
- ^(test-|)requirements.txt$
|
|
- ^.*\.rst$
|
|
- ^api-ref/.*$
|
|
- ^cyborg/cmd/status\.py$
|
|
- ^cyborg/hacking/.*$
|
|
- ^cyborg/tests/functional.*$
|
|
- ^cyborg/tests/unit.*$
|
|
- ^doc/.*$
|
|
- ^etc/.*$
|
|
- ^releasenotes/.*$
|
|
- ^setup.cfg$
|
|
- ^tools/.*$
|
|
- ^tox.ini$
|