diff --git a/.gitignore b/.gitignore
index ebaa1c3..a43694d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,5 @@ _site/
 /build
 /dist
 /bootstrap_vz.egg-info
+/.tox
+/.coverage
diff --git a/bootstrapvz/common/tools.py b/bootstrapvz/common/tools.py
index f392f35..5b6edee 100644
--- a/bootstrapvz/common/tools.py
+++ b/bootstrapvz/common/tools.py
@@ -67,7 +67,7 @@ def load_json(path):
 def load_yaml(path):
 	import yaml
 	with open(path, 'r') as fobj:
-		return yaml.load(fobj)
+		return yaml.safe_load(fobj)
 
 
 def config_get(path, config_path):
diff --git a/tox.ini b/tox.ini
new file mode 100644
index 0000000..d8099cf
--- /dev/null
+++ b/tox.ini
@@ -0,0 +1,10 @@
+[flake8]
+ignore = E101,E221,E241,E501,W191
+max-line-length = 110
+
+[tox]
+envlist = py27
+
+[testenv]
+# Once tests have started being written, uncomment this to run tests when running tox.
+#commands = nosetests -v tests --with-coverage --cover-package=bootstrapvz --cover-inclusive