Merge pull request heroku#836 from heroku/pin-docker18

pin package versions for python-pip to bionic-security
cjolowicz · Aug 29, 2019 · c458743 · c458743
2 parents 96ffc14 + 0ff53eb
commit c458743
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Dockerfile.heroku-18 b/Dockerfile.heroku-18
@@ -6,7 +6,7 @@ ENV WORKSPACE_DIR="/app/builds" \
     S3_PREFIX="heroku-18/" \
     DEBIAN_FRONTEND=noninteractive
 
-RUN apt-get update && apt-get install -y python-pip && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install --no-install-recommends -y python-pip-whl=9.0.1-2 python-pip=9.0.1-2 python-setuptools python-wheel && rm -rf /var/lib/apt/lists/*
 
 COPY requirements.txt /app/
 RUN pip install --disable-pip-version-check --no-cache-dir -r /app/requirements.txt