From ef4432ea35385a90cf8839eb38d54299345bd67d Mon Sep 17 00:00:00 2001 From: Gonzalo Diaz Date: Sun, 20 Sep 2026 00:09:18 -0300 Subject: [PATCH] fix: [BUGFIX] [Docker] sonarcloud: Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here. --- Dockerfile | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 11dcea3a..726e77e8 100644 --- a/Dockerfile +++ b/Dockerfile @@ -18,7 +18,11 @@ COPY ./Makefile ${WORKDIR}/ COPY Pipfile ${WORKDIR}/ COPY Pipfile.lock ${WORKDIR}/ -RUN python -m pip install --no-cache-dir --root-user-action=ignore pipenv==2026.6.1 +RUN python -m pip install \ + --only-binary :all: \ + --no-cache-dir \ + --root-user-action=ignore \ + pipenv==2026.6.1 RUN pipenv sync --dev --python=$(which python) ###############################################################################