Move .bandit into setup.cfg and add bandit to .travis.yml

airbnb · Jan 10, 2018 · 842ddd0 · 842ddd0
1 parent bcb1e98
commit 842ddd0
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 10 deletions.
diff --git a/.bandit b/.bandit
diff --git a/.travis.yml b/.travis.yml
@@ -13,5 +13,6 @@ script:
   - ./manage.py lambda test --processor all
   - sphinx-build -W docs/source docs/build
   - ./tests/scripts/pylint.sh
+  - bandit --ini setup.cfg -r .
 after_success:
   coveralls
diff --git a/setup.cfg b/setup.cfg
@@ -13,6 +13,17 @@ nocapture=1
 [pycodestyle]
 max-line-length=90
 
+[bandit]
+# Skip the venv/ and tests/ directories when scanning.
+exclude: venv,tests
+
+# Skip the following tests:
+#
+# - [B404:blacklist] Consider possible security implications associated with subprocess module.
+#   Severity: Low   Confidence: High
+#       There are other warnings specific to subprocess calls (e.g. B603, B607)
+skips: B404
+
 [yapf]
 COLUMN_LIMIT=100