diff --git a/dev/scripts/dev_heartbeat.py b/dev/scripts/dev_heartbeat.py
index d8738e8c..3c701c87 100644
--- a/dev/scripts/dev_heartbeat.py
+++ b/dev/scripts/dev_heartbeat.py
@@ -86,7 +86,7 @@ def check_vulnerabilities():
     """Run security audits for Python and Node dependencies."""
     issues = []
     # Python: pip-audit (if available)
-    rc, out = sh("pip-audit --requirement <(poetry export --without-hashes) 2>&1", shell=True)
+    rc, out = sh("bash -c 'pip-audit --requirement <(poetry export --without-hashes) 2>&1'")
     if rc == 0:
         # No vulnerabilities
         pass