"tox -e codechecks" no longer dirties the working tree.