fedora-modularity / message-tagging-service Goto Github PK

message-tagging-service.py contains: this_config = yaml.load(config_stream).
Please replace this line with this_config = yaml.safe_load(config_stream), since yaml.load() is very insecure and dangerous, and you should not need the extra power.

The intent of this service is to tag module builds in Koji. However, it does so by acting on a message. The current name may imply that messages are getting tagged instead of builds and may cause confusion.

I think initially the "M" in "MTS" was intended to be "module", not "message".

Hi,

I was searching for the rhmsg library and got to this project where I was really confused what this project does because OSBS team has a project (Gutentag @lkolacek) for tagging images but the name of this project is so similar that I really had to ask @csomh what is this project about and if the project is not similar to Gutentag. Is it possible to change the name to something more descriptive (@csomh suggested module-tagging-service)?

Thank you