From 8716e2b2a634175e46a5f78ad789bea10a10fc8e Mon Sep 17 00:00:00 2001
From: Pooja <pooja@usebruno.com>
Date: Tue, 2 Dec 2025 13:09:16 +0530
Subject: [PATCH] change: default cli sandbox to safe (#6198)

* change: default cli sandbox to safe
---
 .github/workflows/npm-bru-cli.yml      | 2 +-
 .github/workflows/tests.yml            | 2 +-
 packages/bruno-cli/src/commands/run.js | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/npm-bru-cli.yml b/.github/workflows/npm-bru-cli.yml
index 019e96401..1c323dd99 100644
--- a/.github/workflows/npm-bru-cli.yml
+++ b/.github/workflows/npm-bru-cli.yml
@@ -40,7 +40,7 @@ jobs:
         run: |
           cd packages/bruno-tests/collection
           npm install
-          bru run --env Prod --output junit.xml --format junit
+          bru run --env Prod --output junit.xml --format junit --sandbox developer
 
       - name: Publish Test Report
         uses: dorny/test-reporter@v2
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 44c6e34d8..833ceecff 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -96,7 +96,7 @@ jobs:
         run: |
           cd packages/bruno-tests/collection
           npm install
-          node ../../bruno-cli/bin/bru.js run --env Prod --output junit.xml --format junit
+          node ../../bruno-cli/bin/bru.js run --env Prod --output junit.xml --format junit --sandbox developer
 
       - name: Publish Test Report
         uses: EnricoMi/publish-unit-test-result-action@v2
diff --git a/packages/bruno-cli/src/commands/run.js b/packages/bruno-cli/src/commands/run.js
index 34eb6f568..3448cebab 100644
--- a/packages/bruno-cli/src/commands/run.js
+++ b/packages/bruno-cli/src/commands/run.js
@@ -140,8 +140,8 @@ const builder = async (yargs) => {
       type: 'string'
     })
     .option('sandbox', {
-      describe: 'Javascript sandbox to use; available sandboxes are "developer" (default) or "safe"',
-      default: 'developer',
+      describe: 'Javascript sandbox to use; available sandboxes are "safe" (default) or "developer"',
+      default: 'safe',
       type: 'string'
     })
     .option('output', {