From 721e2ccaa509fc3f7ca631df1264fe69748d77f8 Mon Sep 17 00:00:00 2001
From: copilotcoder <copilotcoder@darkhelm.org>
Date: Sun, 21 Jun 2026 22:12:48 -0400
Subject: [PATCH] fix(ci): avoid unbound module variable in purity check

Keep module expansion inside the container shell when probing Python imports, preventing set -u from failing in the host script.
---
 scripts/verify-deployable-image-purity.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/verify-deployable-image-purity.sh b/scripts/verify-deployable-image-purity.sh
index b01752b..9797245 100644
--- a/scripts/verify-deployable-image-purity.sh
+++ b/scripts/verify-deployable-image-purity.sh
@@ -157,7 +157,7 @@ if [ -z "$PYTHON_BIN" ]; then
 fi
 
 for module in ${MODULES}; do
-  if "$PYTHON_BIN" -c "import importlib.util,sys; sys.exit(0 if importlib.util.find_spec('${module}') else 1)" >/dev/null 2>&1; then
+  if "$PYTHON_BIN" -c "import importlib.util,sys; sys.exit(0 if importlib.util.find_spec(\"$module\") else 1)" >/dev/null 2>&1; then
     printf "%s\n" "$module"
   fi
 done