diff --git a/importer/requirements.txt b/importer/requirements.txt
new file mode 100644
index 00000000000..a7635759f74
--- /dev/null
+++ b/importer/requirements.txt
@@ -0,0 +1,7 @@
+# Legacy report importer — pinned for the 2023 toolchain.
+Flask==0.12.2
+PyYAML==5.1
+requests==2.19.1
+Jinja2==2.10
+urllib3==1.24.1
+cryptography==2.3