Fix: bandit pre-commit hook exclude regex

The 'exclude' field in pre-commit hook is a regex, not a glob,
as it is advertised by pre-commit runtime warnings.
"tests/*" matches "tests", "tests/" or "tests//...///" but also any file
or folder, not necessarily at the root of the project, that contains
"tests" in its name.
The right regex to ignore the tests folder at project root is "^test/"

Signed-off-by: Guillaume Lambert <[email protected]>
Change-Id: I12d8c7e2205085ef1fb2fdf267d059112729d705

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index ca5cf7fbb4f65c9a3e61a06eb35a823f8fa143c3..e15b6fde97d51b5a9b24e9fd50208ff21b4de46a 100644 (file)
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -46,7 +46,7 @@ repos:
     hooks:
       - id: bandit
         # Bandit does not need to run on test code
-        exclude: tests/*
+        exclude: ^tests/
 
   - repo: https://github.com/pycqa/pydocstyle
     rev: 5.0.2