[stable-only] Cap bandit to 1.6.2

The 1.6.3 [1] release has dropped support for py2 [2] so cap to 1.6.2 when using py2. [1] https://github.com/PyCQA/bandit/releases/tag/1.6.3 [2] PyCQA/bandit#615 Closes-Bug: #1907438 Change-Id: I294d5350e2f418614e54ff7bdd47dff16bfdcdbc (cherry picked from commit 1f2326cd7cf5f8e32a55091f976f917093a0bede) (cherry picked from commit cac096fcd64213f1e2cfa0848ca9af40a89fc952) (cherry picked from commit b2f96a1f9361c0245faca24702d2843d53e10175) (cherry picked from commit 1a6eb97)
openstack · Dec 10, 2020 · 19218d3 · 19218d3
1 parent 1dd0e1c
commit 19218d3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/test-requirements.txt b/test-requirements.txt
@@ -18,4 +18,4 @@ python-keystoneclient!=2.1.0,>=2.0.0 # Apache-2.0
 reno>=1.8.0  # Apache-2.0
 
 # Security checks
-bandit>=1.1.0 # Apache-2.0
+bandit>=1.1.0,<=1.6.2 # Apache-2.0