[BUGFIX] sonarcloud: Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

Author: Gonzalo Diaz

.github/workflows/yamllint.yml

@@ -18,7 +18,8 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Install yamllint
-        run: pip install yamllint
+        run: >
+          python3 -m pipenv install --system --deploy yamllint
 
       - name: Lint YAML files
         run: >

Pipfile

@@ -0,0 +1,12 @@
+[[source]]
+url = "https://pypi.org/simple"
+verify_ssl = true
+name = "pypi"
+
+[packages]
+yamllint = "*"
+
+[dev-packages]
+
+[requires]
+python_version = "3.14"