| commit | fd0052218c0932ba6511bc6aa99f538ab03dd1c6 | [log] [tgz] |
|---|---|---|
| author | Tomáš Levora <t.levora@partner.samsung.com> | Wed Jun 05 12:53:05 2019 +0200 |
| committer | Tomáš Levora <t.levora@partner.samsung.com> | Wed Jun 05 11:31:42 2019 +0000 |
| tree | 99c2560de80190d8d97c1f6b236a83937c8dfe4b | |
| parent | 16294b10526ff85f0701cdfd5a8238fbbbd314f4 [diff] |
Fix issue with yaml.load in docker collector docker-images-collector.sh script uses yaml.load python function in deprecated way and it is a potential security risk https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation Issue-ID: OOM-1897 Change-Id: Ie30e60b4ede2c87a02b7bbe76e0695f91dc207c6 Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
diff --git a/build/creating_data/docker-images-collector.sh b/build/creating_data/docker-images-collector.sh index 9206b0b..6761c32 100755 --- a/build/creating_data/docker-images-collector.sh +++ b/build/creating_data/docker-images-collector.sh
@@ -47,7 +47,7 @@ import sys with open("${1}", 'r') as f: - values = yaml.load(f) + values = yaml.load(f, Loader=yaml.SafeLoader) enabled = filter(lambda x: values[x].get('enabled', False) == True, values) print(' '.join(enabled))