Merge pull request #4 from star7js/pixeebot/drip-2025-07-09-pixee-python/sandbox-process-creation

Sandbox Process Creation

Author: star7js

pyproject.toml

@@ -40,6 +40,7 @@ dependencies = [
     "python-dotenv>=1.0.0",
     "click>=8.0.0",
     "pydantic>=2.0.0",
+    "security==1.3.1",
 ]
 
 [project.optional-dependencies]
@@ -142,4 +143,4 @@ exclude_lines = [
     "if __name__ == .__main__.:",
     "class .*\\bProtocol\\):",
     "@(abc\\.)?abstractmethod",
-] 
+] 

run_tests.py

@@ -6,14 +6,15 @@
 import subprocess
 import sys
 import os
+from security import safe_command
 
 def run_tests():
     """Run tests using subprocess to avoid PyO3 issues."""
     print("Running tests to avoid PyO3 import issues...")
 
     # Run basic functionality test first
     print("\n1. Running basic functionality test...")
-    result1 = subprocess.run([sys.executable, "test_basic_functionality.py"], 
+    result1 = safe_command.run(subprocess.run, [sys.executable, "test_basic_functionality.py"], 
                            capture_output=True, text=True)
 
     if result1.returncode == 0:
@@ -25,7 +26,7 @@ def run_tests():
 
     # Run improved modules tests
     print("\n2. Running improved modules tests...")
-    result2 = subprocess.run([sys.executable, "-m", "pytest", 
+    result2 = safe_command.run(subprocess.run, [sys.executable, "-m", "pytest", 
                             "tests/test_improved_modules.py", "-v"], 
                            capture_output=True, text=True)
 
@@ -38,7 +39,7 @@ def run_tests():
 
     # Run multi-issue tests
     print("\n3. Running multi-issue tests...")
-    result3 = subprocess.run([sys.executable, "-m", "pytest", 
+    result3 = safe_command.run(subprocess.run, [sys.executable, "-m", "pytest", 
                             "tests/test_multi_issue_upload_with_subtasks.py", "-v"], 
                            capture_output=True, text=True)
 
@@ -66,4 +67,4 @@ def run_tests():
         return 1
 
 if __name__ == "__main__":
-    sys.exit(run_tests()) 
+    sys.exit(run_tests())