Merge pull request #5777: Use bandit (via pantsbuild)

StackStorm · Oct 17, 2022 · 4099a09 · 4099a09
2 parents aaa3b44 + f443f39
commit 4099a09
Show file tree

Hide file tree

Showing 5 changed files with 502 additions and 2 deletions.
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
@@ -25,7 +25,7 @@ on:
 jobs:
   # Lint checks which don't depend on any service containes, etc. to be running.
   lint-checks:
-    name: 'Lint Checks (pants runs: shellcheck, black, flake8)'
+    name: 'Lint Checks (pants runs: shellcheck, bandit, black, flake8)'
     runs-on: ubuntu-latest
 
     env:

diff --git a/CHANGELOG.rst b/CHANGELOG.rst
@@ -53,7 +53,7 @@ Added
 
 * Begin introducing `pants <https://www.pantsbuild.org/docs>`_ to improve DX (Developer Experience)
   working on StackStorm, improve our security posture, and improve CI reliability thanks in part
-  to pants' use of PEX lockfiles. This is not a user-facing addition. #5713 #5724 #5726 #5725 #5732 #5733 #5737 #5738 #5758 #5751 #5774 #5776
+  to pants' use of PEX lockfiles. This is not a user-facing addition. #5713 #5724 #5726 #5725 #5732 #5733 #5737 #5738 #5758 #5751 #5774 #5776 #5777
   Contributed by @cognifloyd
 
 Changed