[BUGFIX] sonarcloud: Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

Author: Gonzalo Diaz

.github/workflows/python-coverage.yml

@@ -44,22 +44,22 @@ jobs:
 
       - name: Test an coverage collect
         run: >
-          python3 -m coverage run -m pytest --verbose
+          pipenv run coverage run -m pytest --verbose
           -o log_cli=true
           --log-cli-level=INFO
           src/
 
       - name: Coverage Report
         run: |
-          python3 -m coverage report
+          pipenv run coverage report
 
       - name: Coverage lcov (codecov)
         run: |
-          python3 -m coverage lcov -o coverage/lcov.info
+          pipenv run coverage lcov -o coverage/lcov.info
 
       - name: Coverage xml (sonarcloud)
         run: |
-          python3 -m coverage xml -o coverage/coverage.xml
+          pipenv run coverage xml -o coverage/coverage.xml
 
       - name: Upload coverage artifact
         uses: actions/upload-artifact@v7

.github/workflows/python-lint.yml

@@ -42,7 +42,7 @@ jobs:
       - name: Install tooling on Windows
         if: runner.os == 'Windows'
         run: |
-          choco install pipenv -y
+          python -m pip install --user pipenv==2026.6.1
         shell: pwsh
 
       - name: Tooling check
@@ -58,20 +58,20 @@ jobs:
 
       - name: Lint (pylint)
         run: |
-          pylint --verbose --recursive yes src/
+          pipenv run pylint --verbose --recursive yes src/
 
       - name: Lint (flake8)
         run: |
-          python3 -m flake8 --verbose src/
+          pipenv run flake8 --verbose src/
 
       - name: Lint (pyright) static type checker
         run: |
-          python3 -m pyright --verbose src/
+          pipenv run pyright --verbose src/
 
       - name: Styling (pycodestyle)
         run: |
-          python3 -m pycodestyle --statistics src/
+          pipenv run pycodestyle --statistics src/
 
       - name: Styling (autopep8)
         run: |
-          python3 -m autopep8  --diff --recursive --exit-code --verbose .
+          pipenv run autopep8  --diff --recursive --exit-code --verbose .

.github/workflows/python-test.yml

@@ -45,7 +45,7 @@ jobs:
       - name: Install tooling on Windows
         if: runner.os == 'Windows'
         run: |
-          choco install pipenv -y
+          python -m pip install --user pipenv==2026.6.1
         shell: pwsh
 
       - name: Tooling check
@@ -61,11 +61,11 @@ jobs:
 
       - name: Test
         run: >
-          coverage run -m pytest --verbose
+          pipenv run coverage run -m pytest --verbose
           -o log_cli=true
           --log-cli-level=INFO
           src/
 
       - name: Coverage
         run: |
-          coverage report
+          pipenv run coverage report

Dockerfile

@@ -13,11 +13,15 @@ RUN  apk add --update --no-cache make \
 FROM init AS base
 
 ENV WORKDIR=/app
+ENV LANG=C.UTF-8
 WORKDIR ${WORKDIR}
 
 COPY ./Makefile ${WORKDIR}/
-COPY ./requirements.txt ${WORKDIR}/
-RUN make dependencies
+COPY Pipfile ${WORKDIR}/
+COPY Pipfile.lock ${WORKDIR}/
+
+RUN python -m pip install --no-cache-dir --root-user-action=ignore pipenv==2026.6.1
+RUN pipenv install --dev --python=$(which python)
 
 ###############################################################################
 FROM base AS lint

PIPENV_MIGRATION.md

@@ -35,4 +35,4 @@ wrapt = "==2.1.2"
 zipp = ">=3.23.1"
 
 [requires]
-python_version = "3.12"
+python_version = "3"