newer mypys want to have typedefs in place for YAML. This is solved
by installing the recommended (by mypy) package.
bandit was misconfigured so that it wasn't actually checking
anything. This was solved by specifying the src directory for bandit
to check. This results in some info messages about the use of the
subprocess module, which is not recommended, but which is okay for
our purposes. These tests have been disabled so the messages aren't
emitted.
This commit solves two problems:
newer mypys want to have typedefs in place for YAML. This is solved by installing the recommended (by mypy) package.
bandit was misconfigured so that it wasn't actually checking anything. This was solved by specifying the src directory for bandit to check. This results in some info messages about the use of the
subprocess
module, which is not recommended, but which is okay for our purposes. These tests have been disabled so the messages aren't emitted.