docker-images-collector.sh script uses yaml.load python function in
deprecated way and it is a potential security risk
https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
Issue-ID: OOM-1897
Change-Id: Ie30e60b4ede2c87a02b7bbe76e0695f91dc207c6
Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
import sys
with open("${1}", 'r') as f:
- values = yaml.load(f)
+ values = yaml.load(f, Loader=yaml.SafeLoader)
enabled = filter(lambda x: values[x].get('enabled', False) == True, values)
print(' '.join(enabled))