style: apply ruff format to fix CI lint failure

features/steps/quality_gates_command_injection_steps.py

@@ -10,14 +10,14 @@ from behave import given, then, when
 from behave.runner import Context
 
 
-_SCRIPT_PATH = Path(__file__).parent.parent.parent / "scripts" / "check-quality-gates.py"
+_SCRIPT_PATH = (
+    Path(__file__).parent.parent.parent / "scripts" / "check-quality-gates.py"
+)
 
 
 def _load_quality_gates_module() -> types.ModuleType:
     """Load the check-quality-gates.py script as a module via importlib."""
-    spec = importlib.util.spec_from_file_location(
-        "check_quality_gates", _SCRIPT_PATH
-    )
+    spec = importlib.util.spec_from_file_location("check_quality_gates", _SCRIPT_PATH)
     if spec is None or spec.loader is None:
         raise ImportError(f"Cannot load module from {_SCRIPT_PATH}")
     mod = importlib.util.module_from_spec(spec)

scripts/check-quality-gates.py

@@ -47,15 +47,15 @@ def validate_path(path_str: str, project_root: Path | None = None) -> Path:
     # Check for dangerous patterns that could be used for injection
     dangerous_patterns = [
         "..",  # Path traversal
-        ";",   # Command separator
-        "|",   # Pipe operator
-        "&",   # Background/AND operator
-        "$",   # Variable/command substitution
-        "`",   # Backtick command substitution (deprecated)
-        "(",   # Subshell grouping start
-        ")",   # Subshell grouping end
-        "<",   # Input redirection
-        ">",   # Output redirection
+        ";",  # Command separator
+        "|",  # Pipe operator
+        "&",  # Background/AND operator
+        "$",  # Variable/command substitution
+        "`",  # Backtick command substitution (deprecated)
+        "(",  # Subshell grouping start
+        ")",  # Subshell grouping end
+        "<",  # Input redirection
+        ">",  # Output redirection
         "\n",  # Newline injection
         "\r",  # Carriage return injection
         "\\n",  # Escaped newline injection in feature/CLI input
@@ -86,10 +86,7 @@ def validate_path(path_str: str, project_root: Path | None = None) -> Path:
         try:
             resolved.relative_to(project_root_resolved)
         except ValueError as e:
-            msg = (
-                f"Path {resolved} is outside project root "
-                f"{project_root_resolved}"
-            )
+            msg = f"Path {resolved} is outside project root {project_root_resolved}"
             raise ValueError(msg) from e
 
     return resolved