[BUGFIX] sonarcloud: Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

Author: Gonzalo Diaz

.github/workflows/python-coverage.yml

@@ -44,22 +44,22 @@ jobs:
 
       - name: Test an coverage collect
         run: >
-          python3 -m coverage run -m pytest --verbose
+          pipenv run coverage run -m pytest --verbose
           -o log_cli=true
           --log-cli-level=INFO
           src/
 
       - name: Coverage Report
         run: |
-          python3 -m coverage report
+          pipenv run coverage report
 
       - name: Coverage lcov (codecov)
         run: |
-          python3 -m coverage lcov -o coverage/lcov.info
+          pipenv run coverage lcov -o coverage/lcov.info
 
       - name: Coverage xml (sonarcloud)
         run: |
-          python3 -m coverage xml -o coverage/coverage.xml
+          pipenv run coverage xml -o coverage/coverage.xml
 
       - name: Upload coverage artifact
         uses: actions/upload-artifact@v7

.github/workflows/python-lint.yml

@@ -42,7 +42,7 @@ jobs:
       - name: Install tooling on Windows
         if: runner.os == 'Windows'
         run: |
-          choco install pipenv -y
+          python -m pip install --user pipenv==2026.6.1
         shell: pwsh
 
       - name: Tooling check
@@ -58,20 +58,20 @@ jobs:
 
       - name: Lint (pylint)
         run: |
-          pylint --verbose --recursive yes src/
+          pipenv run pylint --verbose --recursive yes src/
 
       - name: Lint (flake8)
         run: |
-          python3 -m flake8 --verbose src/
+          pipenv run flake8 --verbose src/
 
       - name: Lint (pyright) static type checker
         run: |
-          python3 -m pyright --verbose src/
+          pipenv run pyright --verbose src/
 
       - name: Styling (pycodestyle)
         run: |
-          python3 -m pycodestyle --statistics src/
+          pipenv run pycodestyle --statistics src/
 
       - name: Styling (autopep8)
         run: |
-          python3 -m autopep8  --diff --recursive --exit-code --verbose .
+          pipenv run autopep8  --diff --recursive --exit-code --verbose .

.github/workflows/python-test.yml

@@ -45,7 +45,7 @@ jobs:
       - name: Install tooling on Windows
         if: runner.os == 'Windows'
         run: |
-          choco install pipenv -y
+          python -m pip install --user pipenv=2026.6.1
         shell: pwsh
 
       - name: Tooling check
@@ -61,11 +61,11 @@ jobs:
 
       - name: Test
         run: >
-          coverage run -m pytest --verbose
+          pipenv run coverage run -m pytest --verbose
           -o log_cli=true
           --log-cli-level=INFO
           src/
 
       - name: Coverage
         run: |
-          coverage report
+          pipenv run coverage report

Dockerfile

@@ -16,7 +16,10 @@ ENV WORKDIR=/app
 WORKDIR ${WORKDIR}
 
 COPY ./Makefile ${WORKDIR}/
-COPY ./requirements.txt ${WORKDIR}/
+COPY Pipfile ${WORKDIR}/
+COPY Pipfile.lock ${WORKDIR}/
+
+RUN python -m pip install --user pipenv==2026.6.1
 RUN make dependencies
 
 ###############################################################################