Merge pull request heroku#836 from heroku/pin-docker18

pin package versions for python-pip to bionic-security

Author: CaseyFaist

Dockerfile.heroku-18

@@ -6,7 +6,7 @@ ENV WORKSPACE_DIR="/app/builds" \
     S3_PREFIX="heroku-18/" \
     DEBIAN_FRONTEND=noninteractive
 
-RUN apt-get update && apt-get install -y python-pip && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install --no-install-recommends -y python-pip-whl=9.0.1-2 python-pip=9.0.1-2 python-setuptools python-wheel && rm -rf /var/lib/apt/lists/*
 
 COPY requirements.txt /app/
 RUN pip install --disable-pip-version-check --no-cache-dir -r /app/requirements.txt