axm-protocols / axm-audit / 21947432698

95%

push

github

fix: use target project venv for subprocess calls

Rules now execute tools (ruff, mypy, pytest, bandit, pip-audit, deptry)
in the audited project's venv via `uv run --directory`, fixing incorrect
results when auditing external projects.

- New: `core/runner.py` with `run_in_project()` helper
- Updated: quality.py, dependencies.py, security.py
- Removed: all `sys.executable` references from rule files
- Added: 10 tests in `test_runner.py` (174 total)

112 of 118 branches covered (94.92%)

Branch coverage included in aggregate %.

746 of 830 relevant lines covered (89.88%)

0.9 hits per line