Use --require-hashes option when installing pipenv
Bug: Issue 16413
Change-Id: Ibbc8a54d9792b669a627c51ff9947fbaeda1c6b1
diff --git a/container/Dockerfile b/container/Dockerfile
index 559ea0e..80a7ad5 100644
--- a/container/Dockerfile
+++ b/container/Dockerfile
@@ -9,7 +9,7 @@
COPY dependencies/ ./
-RUN pip3 install --no-cache --upgrade pipenv && \
+RUN pip3 install --require-hashes --no-cache --upgrade -r ./requirements.txt && \
pipenv install --python 3.7 --system
COPY tools/ ./
diff --git a/container/dependencies/requirements.txt b/container/dependencies/requirements.txt
new file mode 100644
index 0000000..2b967cc
--- /dev/null
+++ b/container/dependencies/requirements.txt
@@ -0,0 +1,10 @@
+certifi==2022.9.24 --hash=sha256:90c1a32f1d68f940488354e36370f6cca89f0f106db09518524c88d6ed83f382
+distlib==0.3.6 --hash=sha256:f35c4b692542ca110de7ef0bea44d73981caeb34ca0b9b6b2e6d7790dda8f80e
+filelock==3.8.0 --hash=sha256:617eb4e5eedc82fc5f47b6d61e4d11cb837c56cb4544e39081099fa17ad109d4
+importlib_metadata==5.0.0 --hash=sha256:ddb0e35065e8938f867ed4928d0ae5bf2a53b7773871bfe6bcc7e4fcdc7dea43
+pipenv==2022.11.11 --hash=sha256:7a75fe8df36226a84ad482d37c003eab131378339bc421b553d8425253980b2c
+platformdirs==2.5.4 --hash=sha256:af0276409f9a02373d540bf8480021a048711d572745aef4b7842dad245eba10
+typing_extensions==4.4.0 --hash=sha256:16fa4864408f655d35ec496218b85f79b3437c829e93320c7c9215ccfd92489e
+virtualenv==20.16.7 --hash=sha256:efd66b00386fdb7dbe4822d172303f40cd05e50e01740b19ea42425cbe653e29
+virtualenv_clone==0.5.7 --hash=sha256:44d5263bceed0bac3e1424d64f798095233b64def1c5689afa43dc3223caf5b0
+zipp==3.10.0 --hash=sha256:4fcb6f278987a6605757302a6e40e896257570d11c51628968ccb2a47e80c6c1
