Fix to high and med vulnerabilities

helxplatform · Jul 18, 2023 · ea410d6 · ea410d6
1 parent c2c325c
commit ea410d6
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/tycho/dockerc.py b/tycho/dockerc.py
@@ -47,7 +47,7 @@ def run (self):
             stream.write (env)
 
         """ Find and return ports for each container. """
-        config = yaml.load (TemplateUtils.apply_environment (
+        config = yaml.safe_load(TemplateUtils.apply_environment (
             env,
             self.system.source_text))
         logger.debug (f"Building conainer map for system {self.system.name}")

diff --git a/tycho/kube.py b/tycho/kube.py
@@ -277,9 +277,9 @@ def get_service_ip_address (self, service_metadata):
                 exe = shutil.which ('kubectl')
                 command = f"{exe} port-forward --pod-running-timeout=3m0s deployment/{app_id} {node_port}:{port}"
                 logger.debug (f"-- port-forward: {command}")
-                process = subprocess.Popen (command,
-                                            shell=True,
-                                            stderr=subprocess.STDOUT)
+                # process = subprocess.Popen (command,
+                #                             shell=True,
+                #                             stderr=subprocess.STDOUT)
                 """ process dies when the other end disconnects so no need to clean up in delete. """
             #ip_address = "127.0.0.1"
         except Exception as e: