diff --git a/Dockerfile b/Dockerfile
index 4bcc21a..e9590d1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,11 +6,12 @@ WORKDIR /
 COPY requirements.txt .
 COPY requirements.yaml .
 
-RUN python3 -m pip install --upgrade pip \
+RUN python3 -m pip install --no-cache-dir --upgrade pip \
 	&& python3 -m pip install --no-cache-dir -r requirements.txt
 
 RUN ansible-galaxy install -r requirements.yaml --roles-path=/ansible/roles
 
+# hadolint ignore=DL3008
 RUN apt-get update \
 	&& apt-get -y --no-install-recommends install \
 	  vim \
diff --git a/requirements.txt b/requirements.txt
index 0cc4204..dce28d0 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,6 +1,4 @@
-#pylint
 pykeepass==4.0.3
-jmespath
-ansible
-#docker-compose
+jmespath==1.0.1
+ansible==10.2.0
 ansible-dev-tools==24.7.2
diff --git a/requirements.yaml b/requirements.yaml
index f697d44..e12e6d9 100644
--- a/requirements.yaml
+++ b/requirements.yaml
@@ -50,3 +50,6 @@ roles:
 #  && ansible-galaxy install -r requirements.yaml
 
 #ansible localhost -m debug -a "var={{ lookup('viczem.keepass.keepass', 'restic_repository_password', 'password') }}"
+
+
+# überall in image versionen gesetzt?