tree 7c2e2e474af422eb6cd4311a1c46013ac7172069
parent b896f33391dc4b21b6ca9fc2608865053ea4454a
author kochera <kochera@google.com> 1662721360 +0000
committer Michael Kochera <kochera@google.com> 1662754856 +0000

Change pip installation to use requirements.txt with hashes

Manifest files like requirements.txt are required for all python
dependencies to ensure accurate vulnerability scanning among other
things. The main steps for developing the requirments.txt is to download pip-tools, make a file called requirements.in, type the package you are trying to install in there, run pip-compile on that file and then a requirement.txt file is auto created with dependencies.

BUG=b/242563296
TEST=https://console.cloud.google.com/cloud-build/builds/9184e261-b74d-4fe9-809b-4ebbe1cf7eff?project=228075978874
RELEASE_NOTES=None

Change-Id: Iee0e28fa07198eea1286c46c11ed49a7583419c6
Reviewed-on: https://cos-review.googlesource.com/c/cos/tools/+/36829
Reviewed-by: Vaibhav Rustagi <vaibhavrustagi@google.com>
Tested-by: Vaibhav Rustagi <vaibhavrustagi@google.com>
Cloud-Build: GCB Service account <228075978874@cloudbuild.gserviceaccount.com>