From ca0d2fdd3a55e62fbc7116f037e493d44e24f5ea Mon Sep 17 00:00:00 2001
From: "pre-commit-ci[bot]"
 <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Date: Tue, 19 May 2026 04:17:36 +0000
Subject: [PATCH] [pre-commit.ci] auto fixes from pre-commit.com hooks

for more information, see https://pre-commit.ci
---
 scripts/lockfile_supply_chain_audit.py | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/scripts/lockfile_supply_chain_audit.py b/scripts/lockfile_supply_chain_audit.py
index ff19703aee..8c5676208b 100644
--- a/scripts/lockfile_supply_chain_audit.py
+++ b/scripts/lockfile_supply_chain_audit.py
@@ -689,9 +689,10 @@ def audit_bun_lockfile(path: Path) -> list[Finding]:
 
         # 2. Integrity hash: registry-resolved entries carry a sha-prefixed
         # tail element. Missing tail on a registry entry is a finding.
-        has_sha_tail = (
-            isinstance(entry[-1], str)
-            and (entry[-1].startswith("sha512-") or entry[-1].startswith("sha256-") or entry[-1].startswith("sha1-"))
+        has_sha_tail = isinstance(entry[-1], str) and (
+            entry[-1].startswith("sha512-")
+            or entry[-1].startswith("sha256-")
+            or entry[-1].startswith("sha1-")
         )
         if not source and not has_sha_tail:
             findings.append(