recordsansible/ara
Code Issues Proposed changes

Temporarily ignore Bandit test B303 for insecure sha1 usage

Browse Source 
Our usage of the sha1 method is only to hash the contents of files so we
don't store a single file more than once.
We can likely use something more "secure" but let's temporarily disable
this check for now.

Change-Id: Ie7b07e489e6c442f34fc9930713b9dfdfa530aaf
This commit is contained in:
David Moreau Simard 2018-09-05 10:07:30 -04:00
parent c4c6645795
commit 5772648b1a
No known key found for this signature in database
GPG Key ID: 33A07694CBB71ECC
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tox.ini
View File

@ -18,9 +18,11 @@ commands = {posargs}
commands = sphinx-build -W -b html doc/source doc/build/html
[testenv:pep8]
# B303 - Use of insecure MD2, MD4, or MD5 hash function.
# We're using sha1 to generate a hash of file contents.
commands =
flake8 ara hacking
bandit -r ara
bandit -r ara --skip B303
[testenv:py35]
commands = python manage.py test ara