fix(dev_heartbeat): use correct sh() signature, fix CLI syntax path

2026-03-19 12:31:25 +01:00
parent 97d989bc04
commit 1205a7c681
1 changed files with 1 additions and 1 deletions
--- a/dev/scripts/dev_heartbeat.py
+++ b/dev/scripts/dev_heartbeat.py
@@ -86,7 +86,7 @@ def check_vulnerabilities():
    """Run security audits for Python and Node dependencies."""
    issues = []
    # Python: pip-audit (if available)
-    rc, out = sh("pip-audit --requirement <(poetry export --without-hashes) 2>&1", shell=True)
+    rc, out = sh("bash -c 'pip-audit --requirement <(poetry export --without-hashes) 2>&1'")
    if rc == 0:
        # No vulnerabilities
        pass