pipeline {

    agent {
        docker {
            image 'python:3.10-slim-bullseye'
        }
    }

    environment {
        HOME = "${env.WORKSPACE}"
    }

    stages {
        stage('Setup') {
            steps {
                sh 'python -m pip install --no-cache-dir --upgrade --user pip'
                sh 'python -m pip install --no-cache-dir pipenv --user'
                sh 'python -m pipenv install --dev'
            }
        }
        stage('Check') {
            // Security check.
            steps {
                sh 'python -m pipenv run bandit -r .'
            }
        }
    }

    post {
        always {
            cleanWs()
        }
    }

}