[BUGFIX] sonarcloud: Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

Author: Gonzalo Diaz

.github/dependabot.yml

@@ -13,7 +13,7 @@ updates:
       interval: "weekly"
 
   # Maintain dependencies for Python
-  - package-ecosystem: "pip"
+  - package-ecosystem: "pipenv"
     directory: "/"
     schedule:
       interval: "weekly"

.github/workflows/snyk-code.yml

@@ -23,7 +23,7 @@ jobs:
         with:
           args: >
             --print-deps
-            --file=requirements.txt
+            --file=Pipfile.lock
             --command=python3
             --sarif-file-output=snyk-code.sarif
       - name: Upload result to GitHub Code Scanning