I have a minimal dockerfile:

# Install pants
COPY pants.toml /opt/build/pants.toml
ENV PANTS_PEX_CLI_VERSION="v2.1.111"
RUN curl -L -O <https://github.com/pantsbuild/pex/releases/download/$PANTS_PEX_CLI_VERSION/pex> && chmod +x ./pex

WORKDIR /opt/build
ENV SCIE_BASE="/root/.cache/nce"
RUN curl -fLO \
  <https://github.com/pantsbuild/scie-pants/releases/download/v0.5.2/scie-pants-linux-x86_64>
RUN curl -fL \
  <https://github.com/pantsbuild/scie-pants/releases/download/v0.5.2/scie-pants-linux-x86_64.sha256> \
  | sha256sum -c -
RUN chmod +x scie-pants-linux-x86_64 && mv scie-pants-linux-x86_64 /usr/local/bin/pants
ENV PANTS_SETUP_CACHE="/root/.cache/pants/setup"
ENV PANTS_PEX_CLI_URL_TEMPLATE="file:/pex"
RUN pants version

running in aws codebuild, it's in a private isolated network. Really I'd just like to understand what causes the

scie-pants

to re-download pants