From 1205a7c681c1207284cdbb5e36171a934cfc89c7 Mon Sep 17 00:00:00 2001
From: aitbc <aitbc-agent@keisanki.net>
Date: Thu, 19 Mar 2026 12:31:25 +0100
Subject: [PATCH] fix(dev_heartbeat): use correct sh() signature, fix CLI
 syntax path

---
 dev/scripts/dev_heartbeat.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dev/scripts/dev_heartbeat.py b/dev/scripts/dev_heartbeat.py
index d8738e8c..3c701c87 100644
--- a/dev/scripts/dev_heartbeat.py
+++ b/dev/scripts/dev_heartbeat.py
@@ -86,7 +86,7 @@ def check_vulnerabilities():
     """Run security audits for Python and Node dependencies."""
     issues = []
     # Python: pip-audit (if available)
-    rc, out = sh("pip-audit --requirement <(poetry export --without-hashes) 2>&1", shell=True)
+    rc, out = sh("bash -c 'pip-audit --requirement <(poetry export --without-hashes) 2>&1'")
     if rc == 0:
         # No vulnerabilities
         pass