[BUGFIX] sonarcloud: Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

Author: Gonzalo Diaz

.github/workflows/python-coverage.yml

@@ -44,22 +44,22 @@ jobs:
 
       - name: Test an coverage collect
         run: >
-          python3 -m coverage run -m pytest --verbose
+          pipenv run coverage run -m pytest --verbose
           -o log_cli=true
           --log-cli-level=INFO
           src/
 
       - name: Coverage Report
         run: |
-          python3 -m coverage report
+          pipenv run coverage report
 
       - name: Coverage lcov (codecov)
         run: |
-          python3 -m coverage lcov -o coverage/lcov.info
+          pipenv run coverage lcov -o coverage/lcov.info
 
       - name: Coverage xml (sonarcloud)
         run: |
-          python3 -m coverage xml -o coverage/coverage.xml
+          pipenv run coverage xml -o coverage/coverage.xml
 
       - name: Upload coverage artifact
         uses: actions/upload-artifact@v7

.github/workflows/python-lint.yml

@@ -42,7 +42,7 @@ jobs:
       - name: Install tooling on Windows
         if: runner.os == 'Windows'
         run: |
-          choco install pipenv -y
+          python -m pip install --user pipenv==2026.6.1
         shell: pwsh
 
       - name: Tooling check
@@ -58,20 +58,20 @@ jobs:
 
       - name: Lint (pylint)
         run: |
-          pylint --verbose --recursive yes src/
+          pipenv run pylint --verbose --recursive yes src/
 
       - name: Lint (flake8)
         run: |
-          python3 -m flake8 --verbose src/
+          pipenv run flake8 --verbose src/
 
       - name: Lint (pyright) static type checker
         run: |
-          python3 -m pyright --verbose src/
+          pipenv run pyright --verbose src/
 
       - name: Styling (pycodestyle)
         run: |
-          python3 -m pycodestyle --statistics src/
+          pipenv run pycodestyle --statistics src/
 
       - name: Styling (autopep8)
         run: |
-          python3 -m autopep8  --diff --recursive --exit-code --verbose .
+          pipenv run autopep8  --diff --recursive --exit-code --verbose .

.github/workflows/python-test.yml

@@ -45,7 +45,7 @@ jobs:
       - name: Install tooling on Windows
         if: runner.os == 'Windows'
         run: |
-          choco install pipenv -y
+          python -m pip install --user pipenv==2026.6.1
         shell: pwsh
 
       - name: Tooling check
@@ -61,11 +61,11 @@ jobs:
 
       - name: Test
         run: >
-          coverage run -m pytest --verbose
+          pipenv run coverage run -m pytest --verbose
           -o log_cli=true
           --log-cli-level=INFO
           src/
 
       - name: Coverage
         run: |
-          coverage report
+          pipenv run coverage report

Dockerfile

@@ -13,11 +13,15 @@ RUN  apk add --update --no-cache make \
 FROM init AS base
 
 ENV WORKDIR=/app
+ENV LANG=C.UTF-8
 WORKDIR ${WORKDIR}
 
 COPY ./Makefile ${WORKDIR}/
-COPY ./requirements.txt ${WORKDIR}/
-RUN make dependencies
+COPY Pipfile ${WORKDIR}/
+COPY Pipfile.lock ${WORKDIR}/
+
+RUN python -m pip install --no-cache-dir --root-user-action=ignore pipenv==2026.6.1
+RUN pipenv sync --dev --python=$(which python)
 
 ###############################################################################
 FROM base AS lint

Makefile

@@ -112,37 +112,37 @@ format/json:
 	prettier --write ./src/**/*.json
 
 format/sources:
-	${RUNTIME_TOOL} -m autopep8 --in-place --recursive --aggressive --aggressive --verbose src/
+	${PACKAGE_TOOL} run autopep8 --in-place --recursive --aggressive --aggressive --verbose src/
 
 format: format/sources format/json
 
 ## Static code analysis
 test/static: dependencies
-	${RUNTIME_TOOL} -m pylint --verbose --recursive yes src/
-	${RUNTIME_TOOL} -m flake8 --verbose src/
-	${RUNTIME_TOOL} -m pyright --verbose src/
+	${PACKAGE_TOOL} run pylint --verbose --recursive yes src/
+	${PACKAGE_TOOL} run flake8 --verbose src/
+	${PACKAGE_TOOL} run pyright --verbose src/
 
 test/styling: dependencies
-	${RUNTIME_TOOL} -m pycodestyle --statistics src/
-	${RUNTIME_TOOL} -m autopep8  --diff --recursive --exit-code --verbose .
+	${PACKAGE_TOOL} run pycodestyle --statistics src/
+	${PACKAGE_TOOL} run autopep8  --diff --recursive --exit-code --verbose .
 
 ## Unit tests and coverage
 test: env dependencies
-	${RUNTIME_TOOL} -m coverage run -m \
+	${PACKAGE_TOOL} run coverage run -m \
 		pytest --verbose \
 		-o log_cli=true \
 		--log-cli-level=${LOG_LEVEL} \
 		--full-trace src/
-	${RUNTIME_TOOL} -m coverage report
+	${PACKAGE_TOOL} run coverage report
 
 coverage: test
-	${RUNTIME_TOOL} -m coverage lcov -o coverage/lcov.info
+	${PACKAGE_TOOL} run coverage lcov -o coverage/lcov.info
 
 coverage/xml: test
-	${RUNTIME_TOOL} -m coverage xml -o coverage/coverage.xml
+	${PACKAGE_TOOL} run coverage xml -o coverage/coverage.xml
 
 coverage/html: test
-	${RUNTIME_TOOL} -m coverage html
+	${PACKAGE_TOOL} run coverage html
 	open htmlcov/index.html
 
 ## Docker Compose commands

PIPENV_MIGRATION.md

@@ -35,4 +35,4 @@ wrapt = "==2.1.2"
 zipp = ">=3.23.1"
 
 [requires]
-python_version = "3.12"
+python_version = "3"