
YAML
Keeping Secrets Out of YAML Config Files and Git History
A password removed from a YAML file stayed in Git history. Reference secrets by name, scan the tree and the history, and rotate anything that was committed.
6 min read
Everything you need to level up your coding skills.

A password removed from a YAML file stayed in Git history. Reference secrets by name, scan the tree and the history, and rotate anything that was committed.

How a YAML tag makes PyYAML run code during load, a harmless demonstration, what changed in PyYAML 6 and the safe options for loading untrusted files.
We send one email when a new article is published. No spam.