use pipenv for static analysis

.github/workflows/static-analysis.yml

@@ -17,20 +17,18 @@ jobs:
       with:
         python-version: '3.10'
 
-    - name: Install Python dependencies
+    - name: Install pipenv
       run: |
         pip install --upgrade pip
-        pip install black
-        pip install flake8
-        pip install isort
-        pip install pre-commit
+        pip install pipenv
 
     # https://github.com/actions/checkout
     - name: Checkout cc-legal-tools-app
       uses: actions/checkout@v4
-      with:
-        path: cc-legal-tools-app
+
+    - name: Install Python dependencies
+      # Install _only_ [dev-packages]
+      run: pipenv sync --categories static-analysis --system
 
     - name: pre-commit
       run: pre-commit run --show-diff-on-failure --color=always --all-files
-      working-directory: ./cc-legal-tools-app

Pipfile

@@ -22,14 +22,21 @@ urllib3 = ">=2.0.7"  # Ensure dependency is secure
 whitenoise = "*"
 
 [dev-packages]
-black = ">=24.3.0"
+black = ">=24.3.0"  # Sync version with [static-analysis], below
 coverage = "*"
 django-debug-toolbar = "*"
 factory-boy = "*"
-flake8 = "*"
-isort = "*"
-pre-commit = "*"
+flake8 = "*"  # Sync version with [static-analysis], below
+isort = "*"  # Sync version with [static-analysis], below
+pre-commit = "*"  # Sync version with [static-analysis], below
 tblib = "*"  # Dependency of coverage (with --parallel)
 
+[static-analysis]
+# Also see: .github/workflows/static-analysis.yml
+black = ">=24.3.0"  # Sync version with [dev-packages], above
+flake8 = "*"  # Sync version with [dev-packages], above
+isort = "*"  # Sync version with [dev-packages], above
+pre-commit = "*"  # Sync version with [dev-packages], above
+
 [requires]
 python_version = "3.10"