pin package versions for python-pip to bionic-security

so that we do not get an update of libssl to 1.1.1, since the stack is still on 1.1.0
This commit is contained in:
Casey Faist
2019-08-28 14:50:28 -07:00
parent 96ffc147d4
commit 0ff53eb59b
+1 -1
View File
@@ -6,7 +6,7 @@ ENV WORKSPACE_DIR="/app/builds" \
S3_PREFIX="heroku-18/" \
DEBIAN_FRONTEND=noninteractive
RUN apt-get update && apt-get install -y python-pip && rm -rf /var/lib/apt/lists/*
RUN apt-get update && apt-get install --no-install-recommends -y python-pip-whl=9.0.1-2 python-pip=9.0.1-2 python-setuptools python-wheel && rm -rf /var/lib/apt/lists/*
COPY requirements.txt /app/
RUN pip install --disable-pip-version-check --no-cache-dir -r /app/requirements.txt