Coverage for src / rhiza / subprocess_utils.py: 100%

1"""Utilities for secure subprocess execution. 

2 

3This module provides helper functions to resolve executable paths 

4to prevent PATH manipulation security vulnerabilities. 

5""" 

6 

7import shutil 

8 

9 

10def get_git_executable() -> str: 

11 """Get the absolute path to the git executable. 

12 

13 This function ensures we use the full path to git to prevent 

14 security issues related to PATH manipulation. 

15 

16 Returns: 

17 str: Absolute path to the git executable. 

18 

19 Raises: 

20 RuntimeError: If git executable is not found in PATH. 

21 """ 

22 git_path = shutil.which("git") 

23 if git_path is None: 

24 msg = "git executable not found in PATH. Please ensure git is installed and available." 

25 raise RuntimeError(msg) 

26 return git_path