refactor: pin system requirements to favor controlled updates

.github/workflows/build.yml

@@ -24,6 +24,16 @@ on:
         required: false
         type: boolean
         default: true
+      RUNNER_WORKFLOW_LABEL:
+        description: 'The label of the runner workflow to run'
+        required: false
+        type: string
+        default: 'ubuntu-24.04'
+      PYTHON_VERSION:
+        description: 'Python version to use for the workflow'
+        required: false
+        type: string
+        default: '3.12'
     secrets:
       DOCKERHUB_USERNAME:
         description: 'DockerHub username for login'
@@ -46,7 +56,7 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ${{ inputs.RUNNER_WORKFLOW_LABEL }}
     defaults:
       run:
         shell: bash
@@ -60,7 +70,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: edunext/picasso
-          ref: main
+          ref: v1
           path: picasso
 
       - name: Checkout strains repository for build configurations
@@ -71,9 +81,15 @@ jobs:
           ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
           path: strains
 
-      - name: Install necessary dependencies
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ inputs.PYTHON_VERSION }}
+
+      - name: Install necessary requirements for workflow scripts
+        working-directory: ${{ github.workspace }}
         run: |
-          pip install pyyaml
+          pip install -r picasso/requirements/base.txt
 
       - name: Get Tutor Configurations from config.yml and set them as an environment variable
         working-directory: ${{ github.workspace }}
@@ -145,7 +161,6 @@ jobs:
           (tutor images build $SERVICE --no-cache 2>&1) | tee $LOGS_FILE_PATH
 
       - name: Scan build logs for potential errors in the image
-        working-directory: ${{ github.workspace }}
         env:
           SCRIPT_PATH: picasso/.github/workflows/scripts/identify_silent_errors.py
           LOGS_FILE_PATH: /tmp/build_logs.out

requirements/base.txt

@@ -0,0 +1 @@
+pyyaml