Add linters and CIs

README.rst

@@ -1,12 +1,12 @@
 YALA - Yet Another Linter Aggregator
 ====================================
 
-|Travis| |codacy| |coveralls| |codeclimate| |issue_time|
+|build| |coveralls| |codecov| |codacy| |codeclimate| |sonarcloud| |issue_time|
 
 YALA combines many linters to improve the quality of your code. Other projects may come to your mind, but does anyone have all the features below?
 
 Works with latest linters
-    Yala uses linters' outputs and doesn't depend on their code.
+    Yala uses linters' outputs and doesn't break on API changes.
 Same defaults
     No changes to linters' default configuration.
 Easy to configure
@@ -59,13 +59,23 @@ Adding a linter
 Check the file *yala/linters.py* and feel free to ask for help.
 
 
-.. |Travis| image:: https://travis-ci.org/cemsbr/yala.svg?branch=master
-           :target: https://travis-ci.org/cemsbr/yala
+.. |build| image:: https://semaphoreci.com/api/v1/cemsbr/yala/branches/ci/shields_badge.svg
+          :target: https://semaphoreci.com/cemsbr/yala
+
 .. |coveralls| image:: https://coveralls.io/repos/github/cemsbr/yala/badge.svg?branch=master
               :target: https://coveralls.io/github/cemsbr/yala?branch=master
-.. |codeclimate| image:: https://api.codeclimate.com/v1/badges/26b718c43a08555bf9c8/maintainability
-                :target: https://codeclimate.com/github/cemsbr/yala/maintainability
+
+.. |codecov| image:: https://codecov.io/gh/cemsbr/yala/branch/master/graph/badge.svg
+            :target: https://codecov.io/gh/cemsbr/yala
+
 .. |codacy| image:: https://api.codacy.com/project/badge/Grade/e435a65c5dd44ecf9369010b29616bd0
            :target: https://www.codacy.com/app/cems/yala?utm_source=github.com&utm_medium=referral&utm_content=cemsbr/yala&utm_campaign=Badge_Grade
+
+.. |codeclimate| image:: https://api.codeclimate.com/v1/badges/26b718c43a08555bf9c8/maintainability
+                :target: https://codeclimate.com/github/cemsbr/yala/maintainability
+
+.. |sonarcloud| image:: https://sonarcloud.io/api/badges/gate?key=github-com-cemsbr-yala
+               :target: https://sonarcloud.io/dashboard?id=github-com-cemsbr-yala
+
 .. |issue_time| image:: http://isitmaintained.com/badge/resolution/cemsbr/yala.svg
                :target: http://isitmaintained.com/project/cemsbr/yala

requirements/dev.txt

@@ -6,27 +6,46 @@
 #
 -e .
 astroid==1.5.3            # via pylint
-click==6.7                # via pip-tools
+bandit==1.4.0
+certifi==2017.11.5        # via requests
+chardet==3.0.4            # via requests
+click==6.7                # via pip-tools, safety
 colorama==0.3.9           # via radon
-coverage==4.4.2
+coverage==4.3.4
 docopt==0.6.2
+docutils==0.14            # via rstcheck
+dparse==0.2.1             # via safety
+eradicate==0.2.1
 first==2.0.1              # via pip-tools
 flake8-polyfill==1.0.1    # via radon
 flake8==3.5.0             # via flake8-polyfill
+gitdb2==2.0.3             # via gitpython
+gitpython==2.1.7          # via bandit
+idna==2.6                 # via requests
 isort==4.2.15             # via pylint
 lazy-object-proxy==1.3.1  # via astroid
 mando==0.6.4              # via radon
 mccabe==0.6.1             # via flake8, pylint
+packaging==16.8           # via dparse, safety
+pbr==3.1.1                # via stevedore
 pip-tools==1.10.1
 pluggy==0.5.2             # via tox
 py==1.5.2                 # via tox
 pycodestyle==2.3.1        # via flake8
 pydocstyle==2.1.1
 pyflakes==1.6.0           # via flake8
 pylint==1.7.4
+pyparsing==2.2.0          # via packaging
+pyyaml==3.12              # via bandit, dparse
 radon==2.1.1
-six==1.11.0               # via astroid, mando, pip-tools, pydocstyle, pylint, tox
+requests==2.18.4          # via safety
+rstcheck==3.1
+safety==1.6.1
+six==1.11.0               # via astroid, bandit, dparse, mando, packaging, pip-tools, pydocstyle, pylint, stevedore, tox
+smmap2==2.0.3             # via gitdb2
 snowballstemmer==1.2.1    # via pydocstyle
+stevedore==1.27.1         # via bandit
 tox==2.9.1
+urllib3==1.22             # via requests
 virtualenv==15.1.0        # via tox
 wrapt==1.10.11            # via astroid

setup.py

@@ -43,8 +43,14 @@
     # $ pip install -e .[dev,test]
     extras_require={
         'dev': [
-            'coverage',
+            # https://bitbucket.org/ned/coveragepy/issues/578/
+            # incomplete-file-path-in-xml-report
+            'bandit',
+            'coverage<4.4',
+            'eradicate',
             'pip-tools',
+            'rstcheck',
+            'safety',
             'tox',
         ]
     },

tox.ini

@@ -6,8 +6,13 @@ commands=
     rm -rf ./yala.egg-info/
     coverage run setup.py test
     yala setup.py yala tests
-    -coveralls
+    ; Commented-out code
+    eradicate -r yala tests
+    ; Security issues
+    bandit --skip B404 -r yala
+    ; Security issues in dependencies
+    safety check
+    rstcheck README.rst
     coverage report
 deps=
     -rrequirements/dev.txt
-    coveralls