Skip to content

Commit bffc37f

Browse files
agent: make YAML audit scan deterministic
1 parent ef7736e commit bffc37f

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

tests/test_synonyms.py

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,9 @@ def test_yaml_loaded_only_via_safe_load():
103103
for scan_root in scan_roots:
104104
for source_path in sorted(scan_root.rglob("*.py")):
105105
relative_path = source_path.relative_to(repo_root).as_posix()
106-
for line_number, line in enumerate(source_path.read_text().splitlines(), 1):
106+
for line_number, line in enumerate(
107+
source_path.read_text(encoding="utf-8").splitlines(), 1
108+
):
107109
if unsafe_load_call.search(line) or unsafe_loader_name.search(line):
108110
violations.append(f"{relative_path}:{line_number}: unsafe YAML load")
109111
if source_path.is_relative_to(src_root) and safe_load_call.search(line):

0 commit comments

Comments
 (0)