[PKG-Openstack-devel] Bug#794072: bandit: doesn't use /etc/bandit/bandit.yaml

[Dave Walker]

Hi Jakub,

Thanks for raising this bug.

The upstream documentation claims to use /etc/bandit/bandit.yaml, but
as you have discovered it is bogus.

This is being tracked as an upstream bug[0] and I am working on an
upstream fix[1].

Installing the config seemed like the appropriate thing to do as the
next upstream release will correctly use the /etc/bandit.yaml file,
which should be available in the coming weeks.

I think it makes sense to keep this bug open and resolve it with the
new upstream version.

Thanks!

[0] https://bugs.launchpad.net/bandit/+bug/1475510
[1] https://review.openstack.org/#/c/203451/

--
Kind Regards,
Dave Walker