Upgrade from gopkg.in/yaml.v2 to gopkg.in/yaml.v3

[suharshs]

There is a security vulnerability in gopkg.in/yaml.v2: https://security.snyk.io/vuln/SNYK-GOLANG-GOPKGINYAMLV3-2841557

I found that in the turbot/steampipe project this is happening because of the ghodss/yaml import. Looking through their issues, its seems they haven't responded to upgrading yet. In ghodss/yaml#81, a user of this library that ran into the same issue created a fork with a fix: https://github.com/invopop/yaml

Can turbot/steampipe either switch to https://github.com/invopop/yaml or avoid using ghodss/yaml to resolve this security vulnerabilty?

[suharshs]

Apologies I misread our security issue, this has been revoked as a v2 issue, sorry for the noise