diff --git a/Dockerfile b/Dockerfile
index 32676426..7cabed3e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -22,7 +22,7 @@ RUN apk add --no-cache \
             openjdk8 \
             maven \
             python \
-            py2-pip \
+            py3-pip \
             perl \
             git \
             php7 \
@@ -30,8 +30,6 @@ RUN apk add --no-cache \
             curl \
             ruby
 
-RUN pip install safety==1.8.4 piprot==0.9.10 bandit==1.5.1
-
 RUN { \
         echo 'install: --no-document'; \
         echo 'update: --no-document'; \
@@ -63,6 +61,7 @@ COPY --from=cargo-audit-build /home/rust/bin/ /usr/local/bin/
 
 WORKDIR /hawkeye
 COPY . .
+RUN pip3 install -r requirements.txt
 RUN npm install --production --quiet && \
     rm -rf /var/cache/apk/*
 
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 00000000..196b0ed5
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1,3 @@
+safety==1.9.0
+piprot==0.9.11
+bandit==1.6.2