Yes, probably. We could also check a specific get-pip.py into the repo itself and ADD it from the Dockerfile, or fetch get-pip.py from our S3. I'll make a PR to pin these at a stable version.