Merge pull request #274 from sbesson/pyyaml_loader_6.0

Always pass a Loader argument to yaml.load
ome · Oct 15, 2021 · 47407f3 · 47407f3
2 parents 23ed55f + feb2c22
commit 47407f3
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/scc/git.py b/scc/git.py
@@ -1061,7 +1061,7 @@ def __init__(self, gh, path, remote="origin", push_branch=None,
             self.dbg("Reading repository configuration from %s" %
                      (repository_config))
             with open(self.repository_config) as fh:
-                self.repository_config = yaml.load(fh)
+                self.repository_config = yaml.load(fh, Loader=yaml.FullLoader)
         if self.repository_config is not None:
             self.dbg("Repository configuration:\n%s" %
                      (yaml.dump(self.repository_config)))
@@ -4119,7 +4119,7 @@ def extact_metadata(self, directory):
                 if fn == self.META_FILE:
                     fullpath = os.path.join(dirpath, fn)
                     with open(fullpath) as fp:
-                        data = yaml.load(fp)
+                        data = yaml.load(fp, Loader=yaml.FullLoader)
                     # find information about the repository
                     jinja2 = {}
                     with open(fullpath) as file:
@@ -4231,7 +4231,7 @@ def update_data(self, directory, jinja2, version, sha256,
                     yaml.indent(mapping=2)
                     # read the meta files and update the value
                     with open(fullpath) as fp:
-                        data = yaml.load(fp)
+                        data = yaml.load(fp, Loader=yaml.FullLoader)
                     if data["source"][self.KEY_SHA] and \
                        self.KEY_SHA not in jinja2.keys():
                         data["source"][self.KEY_SHA] = sha256