14
0
forked from pool/python-bandit
Files
python-bandit/python-bandit.spec
Dirk Mueller 014c1eb61d - update to 1.7.2:
* Correctly define extras in \`setup.cfg\` (#755)
  * Remove leftover openstack code (#778)
  * Added snmp\_security check plugin for various SNMP checks (#403)
  * Fix README.rst (#365)
  * Fixup typo (#769)
  * Drop end-of-life Python 3.6 (#777)
  * Drop end-of-life Python 3.5 (#746)
  * Start using auto-formatters (#754)
  * Create FUNDING.yml (#774)
  * test\_help\_arg: remove assert on 'optional arguments' (#752)
  * Fix broken reported URL link for B107 (#751)

- update to 1.7.1:
  * fix reading initial values from .bandit
  * Always use a Loader in yaml.load
  * PEP-518 support: configure bandit via pyproject.toml
  * document that random.choices() isn't secure either
  * Fix syntax errors in bug report
  * Update bug\_report.yaml
  * Fix syntax error in bug report
  * Use new issue template format
  * Update README.rst
  * Mock part of python 3.x
  * Add license to package installation metadata
  * #694 Bandit fails when using importlib with named arguments
  * Add string options for severity and confidence
  * Add support for Python 3.9
  * Create config.yml
  * Add default labels to issues

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-bandit?expand=0&rev=19
2022-02-06 10:12:57 +00:00

124 lines
3.8 KiB
RPMSpec

#
# spec file for package python-bandit
#
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
%global flavor @BUILD_FLAVOR@%{nil}
%if "%{flavor}" == "test"
%define psuffix -test
%bcond_without test
%else
%define psuffix %{nil}
%bcond_with test
%endif
# CLI tool, no module
%define pythons python3
%bcond_without builddocs
Name: python-bandit
Version: 1.7.2
Release: 0
Summary: Security oriented static analyser for Python code
License: Apache-2.0
URL: https://github.com/PyCQA/bandit
Source: https://files.pythonhosted.org/packages/source/b/bandit/bandit-%{version}.tar.gz
Patch0: remove-non-test-deps.patch
BuildRequires: fdupes
BuildRequires: python-rpm-macros
Requires: python-GitPython >= 1.0.1
Requires: python-PyYAML >= 5.3.1
Requires: python-six >= 1.10.0
Requires: python-stestr >= 1.0.0
Requires: python-stevedore >= 1.20.0
Requires(post): update-alternatives
Requires(postun):update-alternatives
BuildArch: noarch
%if %{with test}
BuildRequires: %{python_module GitPython >= 1.0.1}
BuildRequires: %{python_module PyYAML >= 5.3.1}
BuildRequires: %{python_module bandit == %{version}}
BuildRequires: %{python_module beautifulsoup4 >= 4.8.0}
BuildRequires: %{python_module fixtures >= 3.0.0}
BuildRequires: %{python_module mock >= 3.0.5}
BuildRequires: %{python_module pbr >= 2.0}
BuildRequires: %{python_module python-subunit >= 0.0.18}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module six >= 1.10.0}
BuildRequires: %{python_module stestr >= 2.5.0}
BuildRequires: %{python_module stevedore >= 1.20.0}
BuildRequires: %{python_module testrepository >= 0.0.18}
BuildRequires: %{python_module testscenarios >= 0.5.0}
BuildRequires: %{python_module testtools >= 2.3.0}
%endif
# doc requirements
%if %{with builddocs}
BuildRequires: %{python_module Sphinx >= 1.2.1}
BuildRequires: %{python_module reno >= 1.8.0}
%endif
%python_subpackages
%description
Bandit is a tool designed to find common security issues in Python code. To do
this Bandit processes each file, builds an AST from it, and runs appropriate
plugins against the AST nodes. Once Bandit has finished scanning all the files
it generates a report.
%prep
%setup -q -n bandit-%{version}
%patch0 -p1
sed -i '/^#!/d' bandit/__main__.py
%if !%{with test}
%build
%python_build
%endif
%if !%{with test}
%install
%python_install
%python_expand %fdupes %{buildroot}%{$python_sitelib}
%python_clone -a %{buildroot}%{_bindir}/bandit
%python_clone -a %{buildroot}%{_bindir}/bandit-config-generator
%python_clone -a %{buildroot}%{_bindir}/bandit-baseline
%endif
%if %{with test}
%check
%pyunittest discover -v
%endif
%if !%{with test}
%post
%{python_install_alternative bandit bandit-config-generator bandit-baseline }
%endif
%if !%{with test}
%postun
%python_uninstall_alternative bandit
%endif
%if !%{with test}
%files %{python_files}
%license LICENSE
%doc AUTHORS ChangeLog README.rst
%python_alternative %{_bindir}/bandit
%python_alternative %{_bindir}/bandit-config-generator
%python_alternative %{_bindir}/bandit-baseline
%{python_sitelib}/*
%endif
%changelog