In both cases (

python foo.py

and

./foo.py

), osquery is reporting on the python interpreter