FROM python:3.11-slim
WORKDIR /work
# transformers downloads the GPT-2 tokenizer from the Hub at run time, so this
# package verifies in script mode (which has network); a hermetic docker run
# would bake the tokenizer files into the image first.
RUN pip install --no-cache-dir "transformers>=4.40"
CMD ["bash", "verify/verify.sh"]