Bandit reports 'json.load' as 'yaml.load'

[Luke Hinds]

json.load is incorrectly parsed as yaml.load...see the following example

yaml_load: Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load().
Test ID: B506
Severity: MEDIUM
Confidence: HIGH
File: <snip>
More info: http://docs.openstack.org/developer/bandit/plugins/yaml_load.html
348 .format(RESULTS_DIR, test_name)) as json_file:
349 json_data = json.load(json_file)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/383245

[Luke Hinds (lhinds)]

Just tested against the same code and LGTM.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/383245
Committed: https://git.openstack.org/cgit/openstack/bandit/commit/?id=e98515faf0a1089baafbd106694b02e548581b32
Submitter: Jenkins
Branch: master

commit e98515faf0a1089baafbd106694b02e548581b32
Author: Dave McCowan <email address hidden>
Date: Thu Oct 6 14:28:04 2016 -0400

    Use qualname list to avoid false positive on load()

    The code checking for yaml.load() issues had false positives
    on json.load() and foo.load(). This patch checks the
    qualnames of the load function to avoid false positives.

    Change-Id: I22ffb9e852e31d04dc49c4ad949d1417e70f8828
    Closes-bug: 1622615