mirror of
https://github.com/theupdateframework/python-tuf
synced 2026-05-24 10:08:28 +00:00
009566aa23
* Remove bandit * Add ruff ruleset "flake8-bandit" * verify_release is now checked by bandit * Avoid some asserts as suggested * ignore a subprocess.run lint: it seems dumb * ignore all bandit rules for tests and examples (just like before) Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
37 lines
859 B
YAML
37 lines
859 B
YAML
version: 2
|
|
updates:
|
|
|
|
- package-ecosystem: "pip"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 10
|
|
groups:
|
|
build-and-release-dependencies:
|
|
# Python dependencies known to be critical to our build/release security
|
|
patterns:
|
|
- "build"
|
|
- "hatchling"
|
|
test-and-lint-dependencies:
|
|
# Python dependencies that are only pinned to ensure test reproducibility
|
|
patterns:
|
|
- "coverage"
|
|
- "mypy"
|
|
- "ruff"
|
|
- "tox"
|
|
dependencies:
|
|
# Python (developer) runtime dependencies. Also any new dependencies not
|
|
# caught by earlier groups
|
|
patterns:
|
|
- "*"
|
|
|
|
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 10
|
|
groups:
|
|
action-dependencies:
|
|
patterns:
|
|
- "*"
|