From 621966d812f5313f73f8f053d310ce6b2def914a Mon Sep 17 00:00:00 2001
From: Henry Jameson <me@hjkos.com>
Date: Wed, 5 Aug 2026 19:35:58 +0300
Subject: [PATCH] another security issue found by sonarqube (might need to
 extend later)

---
 build/commit_hash.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build/commit_hash.js b/build/commit_hash.js
index 8225817ee..3719f5906 100644
--- a/build/commit_hash.js
+++ b/build/commit_hash.js
@@ -7,7 +7,7 @@ export const getCommitHash = () => {
   } else {
     try {
       return childProcess
-        .execSync('git rev-parse --short HEAD')
+        .execSync('PATH=/usr/bin:/bin:/usr/local/bin:/sbin:/usr/sbin git rev-parse --short HEAD')
         .toString()
         .trim()
     } catch (e) {