Merge pull request #649 from replicatedhq/divolgin/sc-105903/patch-py…

…yaml-in-replicated-installer-for

Bump PyYAML 4.2b4 -> 5.4

Makefile

@@ -14,7 +14,7 @@ deps:
 	pip install -r requirements.txt
 
 build:
-	docker build -t install-scripts -f deploy/Dockerfile.prod .
+	docker build --pull -t install-scripts -f deploy/Dockerfile.prod .
 
 dev:
 	docker build -t install-scripts-dev .
@@ -119,3 +119,8 @@ test:
 run:
 	/dcg --raw > install_scripts/templates/swarm/docker-compose-generate-safe.sh
 	python2 main.py
+
+.PHONY: scan
+scan: build
+	curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b bin
+	./bin/grype --fail-on medium --only-fixed install-scripts:latest

requirements.txt

@@ -3,7 +3,7 @@ Flask==0.12.3
 mysql-connector==2.1.7
 pytest==3.0.6
 pytest-mock==1.5.0
-PyYAML==4.2b4
+PyYAML==5.4
 git+https://github.com/emosbaugh/python-semver@f26d956e2ea13a8159e5629d5b7bf225f8ae5a61#egg=semver
 shellescape==3.8.1
 uWSGI==2.0.17