Runner has no sudo binary but already runs as root, and no pipx. Call apt-get directly and pip install --user semgrep instead. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>