)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"ae2009fb4567d19a37d9459c450516eb4cc0ac54","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"The profile that we run for the gate run is renamed to \"gate\""},{"line_number":10,"context_line":"from \"keystone_conservative\"."},{"line_number":11,"context_line":"This will be the standard configuration for OpenStack projects."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Removed the keystone_verbose profile since this isn\u0027t used."},{"line_number":14,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"ba15a1d1_7ce775e4","line":11,"updated":"2015-09-22 12:58:28.000000000","message":"Is there a link to a ML thread for this or a discussion at all?","commit_id":"0545ccf66796161ef0908d9a451b53c8118f4bda"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"34b232c41b1db45dd29773cff52dd2e72e1d396f","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"The profile that we run for the gate run is renamed to \"gate\""},{"line_number":10,"context_line":"from \"keystone_conservative\"."},{"line_number":11,"context_line":"This will be the standard configuration for OpenStack projects."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Removed the keystone_verbose profile since this isn\u0027t used."},{"line_number":14,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"ba15a1d1_df50f30c","line":11,"in_reply_to":"ba15a1d1_7ce775e4","updated":"2015-09-22 13:06:09.000000000","message":"The bandit config wiki points to the keystone bandit.yaml as the exemplar: https://wiki.openstack.org/wiki/Security/Projects/Bandit","commit_id":"0545ccf66796161ef0908d9a451b53c8118f4bda"}],"bandit.yaml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"ae2009fb4567d19a37d9459c450516eb4cc0ac54","unresolved":false,"context_lines":[{"line_number":50,"context_line":"            - set_bad_file_permissions"},{"line_number":51,"context_line":"            - hardcoded_tmp_directory"},{"line_number":52,"context_line":"            - subprocess_popen_with_shell_equals_true"},{"line_number":53,"context_line":"            - any_other_function_with_shell_equals_true"},{"line_number":54,"context_line":"            - linux_commands_wildcard_injection"},{"line_number":55,"context_line":"            - ssl_with_bad_version"},{"line_number":56,"context_line":"            - ssl_with_bad_defaults"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"ba15a1d1_9c8609da","side":"PARENT","line":53,"updated":"2015-09-22 12:58:28.000000000","message":"it looks like \n\n    any_other_function_with_shell_equals_true\n    ssl_with_bad_defaults\n\nwill not be run anymore? is this a regression we have to worry about? should we include those in what is now gate?","commit_id":"12ed2536d0600b5e87a2098f099a903591349ce7"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"34b232c41b1db45dd29773cff52dd2e72e1d396f","unresolved":false,"context_lines":[{"line_number":50,"context_line":"            - set_bad_file_permissions"},{"line_number":51,"context_line":"            - hardcoded_tmp_directory"},{"line_number":52,"context_line":"            - subprocess_popen_with_shell_equals_true"},{"line_number":53,"context_line":"            - any_other_function_with_shell_equals_true"},{"line_number":54,"context_line":"            - linux_commands_wildcard_injection"},{"line_number":55,"context_line":"            - ssl_with_bad_version"},{"line_number":56,"context_line":"            - ssl_with_bad_defaults"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"ba15a1d1_bf9bbfc8","side":"PARENT","line":53,"in_reply_to":"ba15a1d1_9c8609da","updated":"2015-09-22 13:06:09.000000000","message":"None of these were ever run. We only ran the keystone_conservative profile.","commit_id":"12ed2536d0600b5e87a2098f099a903591349ce7"}]}