Hi guys, I look into the code and I see that when you found a pipfile you are regenerating the requirements.txt file. So basically the existent of the Pipfile.lock is ignored. From what I read about pipenv I found that to generate a deterministic installation you could use:
pipenv install --ignore-pipfile
That is going to install what you have defined on the lock file.

Can that approach being used instead of regenerating the dependencies tree?
Thanks