Merge pull request #2048 from github/fix/code-scanning-supply-chain-hardening

fix: resolve supply chain security code scanning alerts

Author: zkoppert

.dockerignore

@@ -25,15 +25,4 @@ updates:
         update-types:
           - 'minor'
           - 'patch'
-  - package-ecosystem: 'docker'
-    directory: '/'
-    schedule:
-      interval: 'weekly'
-    commit-message:
-      prefix: 'chore(deps)'
-    groups:
-      dependencies:
-        applies-to: version-updates
-        update-types:
-          - 'minor'
-          - 'patch'
+

.github/dependabot.yaml

@@ -54,7 +54,7 @@ jobs:
       - name: Install Python dependencies
         run: |
           echo 'docutils==0.22.4 --hash=sha256:d0013f540772d1420576855455d050a2180186c91c15779301ac2ccb3eeb68de' > /tmp/requirements.txt
-          python -m pip install -r /tmp/requirements.txt
+          python -m pip install --require-hashes --no-deps -r /tmp/requirements.txt
 
       - name: Run rake
         run: |