2
0
mirror of https://github.com/openkmip/pykmip synced 2025-12-05 23:53:19 +00:00

Temporarily pin bandit to 1.5.1

A recent regression in bandit 1.6.0 permits the scanning of test
files for vulnerabilities even when those files should be excluded
using the '-x' flag. This change temporarily pins bandit to 1.5.1
in test-requirements.txt to get around this issue in the short
term.

This patch should be undone once bandit 1.6.1 is released, fixing
this issue.
This commit is contained in:
Peter Hamilton
2019-05-09 10:40:19 -04:00
committed by Peter Hamilton
parent cd16b20a6b
commit a7f05ab7be

View File

@@ -6,4 +6,4 @@ fixtures
mock
slugs
sphinx
bandit
bandit==1.5.1