Disable pip cache in pre-commit container

/.cache/pip is owned by root; as UID 1001 pip emits a cache-permission warning. Container is ephemeral so caching has no value — disable it with PIP_NO_CACHE_DIR=1. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Use venv inside pre-commit container instead of pip --user
2026-04-13 23:08:37 +02:00 · 2026-04-13 23:08:02 +02:00
1 changed files with 2 additions and 2 deletions
@@ -20,10 +20,10 @@ docker run --rm \
  -w /repo \
  -e STAGED_FILES="$STAGED" \
  -u 1001:1001 \
-  -e HOME=/tmp \
  -e PIP_DISABLE_PIP_VERSION_CHECK=1 \
+  -e PIP_NO_CACHE_DIR=1 \
  python:3.12-slim \
-  sh -c "pip install --quiet --user --no-warn-script-location bandit && python scripts/security_check.py"
+  sh -c "python -m venv /tmp/venv && /tmp/venv/bin/pip install --quiet bandit && /tmp/venv/bin/python scripts/security_check.py"

 EXIT_CODE=$?