You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A recent change within pyyaml 6.0 has enforce use of a Loader argument
to yaml.load [1].
To comply, Bandit will use yaml.load with a Loader always. The plugin
to check for unsafe loaders of yaml module still applies.
[1] yaml/pyyaml#561Closes#744
Signed-off-by: Eric Brown <browne@vmware.com>
Describe the bug
PyYAML 6.0 was recently released for Python 3.6 and up, which causes tests for these versions to fail due to a breaking change:
https://github.com/yaml/pyyaml/blob/8cdff2c80573b8be8e8ad28929264a913a63aa33/CHANGES#L17
log:
requirements.txt specifies
PyYAML>=5.3.1
, replacing it withPyYAML>=5.3.1, <6.0
resolves the problemReproduction steps
Expected behavior
tests are passing
Bandit version
1.7.0 (Default)
Python version
3.6
Additional context
No response
The text was updated successfully, but these errors were encountered: