Security News
38% of CISOs Fear They’re Not Moving Fast Enough on AI
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
hacking is a set of flake8 plugins that test and enforce the
OpenStack StyleGuide <https://docs.openstack.org/hacking/latest/user/hacking.html#styleguide>
_
Hacking pins its dependencies, as a new release of some dependency can break hacking based gating jobs. This is because new versions of dependencies can introduce new rules, or make existing rules stricter.
hacking is available from pypi, so just run::
pip install hacking
This will install specific versions of flake8
with the hacking
,
pep8
, mccabe
and pyflakes
plugins.
Hacking started its life out as a text file in Nova's first commit. It was
initially based on the Google Python Style Guide
_, and over time more
OpenStack specific rules were added. Hacking serves several purposes:
Initially the hacking style guide was enforced manually by reviewers, but this was a big waste of time so hacking, the tool, was born to automate the process and remove the extra burden from human reviewers.
.. _Google Python Style Guide
: https://google.github.io/styleguide/pyguide.html
hacking uses the major.minor.maintenance
release notation, where maintenance
releases cannot contain new checks. This way projects can gate on hacking
by pinning on the major.minor
number while accepting maintenance updates
without being concerned that a new version will break the gate with a new
check.
For example a project can depend on hacking>=0.10.0,<0.11.0
, and can know
that 0.10.1
will not fail in places where 0.10.0
passed.
Each check is a pep8 plugin so read
The focus of new or changed rules should be to do one of the following
But, as always, remember that these are Guidelines. Treat them as such. There are always times for exceptions. All new rules should support noqa.
If a check needs to be staged in, or it does not apply to every project or its branch, it can be added as off by default.
StyleGuide <https://docs.openstack.org/hacking/latest/user/hacking.html#styleguide>
_,
and hacking just enforces
them; so when adding a new check, it must be in HACKING.rst
Local Checks
_setup.cfg
Hxxx
groupSome of the available checks are disabled by default. These checks are:
To enable these checks, edit the flake8
section of the tox.ini
file.
For example to enable H106 and H203:
.. code-block:: ini
[flake8] enable-extensions = H106,H203
hacking supports having local changes in a source tree. They need to be registered individually in tox.ini:
Add to tox.ini a new section flake8:local-plugins
and list each plugin with
its entry-point. Additionally, you can add the path to the files
containing the plugins so that the repository does not need to be
installed with the paths
directive.
.. code-block:: ini
[flake8:local-plugins] extension = N307 = checks:import_no_db_in_virt N325 = checks:CheckForStrUnicodeExc paths = ./nova/hacking
The plugins, in the example above they live in
nova/hacking/checks.py
, need to annotate all functions with @core.flake8ext
.. code-block:: python
from hacking import core ... @core.flake8ext def import_no_db_in_virt(logical_line, filename): ...
class CheckForStrUnicodeExc(BaseASTChecker): name = "check_for_str_unicode_exc" version = "1.0" ...
Further details are part of the flake8 documentation <https://flake8.pycqa.org/en/latest/plugin-development/index.html>
_.
FAQs
OpenStack Hacking Guideline Enforcement
We found that hacking demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.
Security News
Company News
Socket is joining TC54 to help develop standards for software supply chain security, contributing to the evolution of SBOMs, CycloneDX, and Package URL specifications.