YAML
Keeping Secrets Out of YAML Config Files and Git History
A password removed from a YAML file stayed in Git history. Reference secrets by name, scan the tree and the history, and rotate anything that was committed.
6 min read
Topic
Security
Stop injection, trim privileges, encrypt what matters, and keep the data out of places it should not be.
YAML
Why yaml load Is Dangerous and What to Use Instead
How a YAML tag makes PyYAML run code during load, a harmless demonstration, what changed in PyYAML 6 and the safe options for loading untrusted files.
6 min read
Get new articles by email
We send one email when a new article is published. No spam.