[VVP] Adding bandit security scans and fixes

[vvp/validation-scripts.git] / tox.ini

diff --git a/tox.ini b/tox.ini
index 61667f5..84e1b14 100644 (file)
--- a/tox.ini
+++ b/tox.ini
@@ -35,12 +35,11 @@
 #
 # ============LICENSE_END============================================
 #
-# ECOMP is a trademark and service mark of AT&T Intellectual Property.
 #
 
 [tox]
 skipsdist=True
-envlist = py27,py3,style
+envlist = py36
 
 [testenv]
 distribute = False
@@ -49,18 +48,15 @@ commands =
     pytest --version
     coverage run --module pytest ice_validator/tests --self-test -rxXs
     coverage xml
-deps = -rrequirements.txt
-    flake8==3.4.1
-    coverage==4.5.1
+    flake8 --version
+    flake8 ice_validator
+    bandit -c bandit.yaml -r . -x ./.tox/**,./venv-tox/**
+deps = --no-use-pep517 
+    -rrequirements.txt
+    flake8
+    coverage
+    bandit
 
-[testenv:style]
-commands = flake8 ice_validator
-
-[testenv:py27]
-basepython=python2.7
-
-[testenv:py3]
-basepython=python3.6
 
 [flake8]
 ignore = W391, W503, E501