Merge pull request aws-samples#12 from aws-samples/yaml-fix

refactor: Use more secure yaml load method
joshkurz · Jan 11, 2023 · 7ce36a6 · 7ce36a6
2 parents a8a3a3e + 3729123
commit 7ce36a6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/hardeneks/__init__.py b/hardeneks/__init__.py
@@ -153,7 +153,7 @@ def run_hardeneks(
     console.print()
 
     with open(config, "r") as f:
-        config = yaml.load(f, Loader=yaml.FullLoader)
+        config = yaml.safe_load(f)
 
     if not namespace:
         namespaces = _get_namespaces(config["ignore-namespaces"])