ci: Add --require-hashes to pip install

Signed-off-by: Ryan Northey <ryan@synca.io>
envoyproxy · Nov 26, 2024 · dab3995 · dab3995
1 parent 3ee28ee
commit dab3995
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -58,7 +58,7 @@ jobs:
     - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b  # v5.3.0
       with:
         python-version: "3.11"
-    - run: pip install -r .github/workflows/requirements.txt
+    - run: pip install --require-hashes -r .github/workflows/requirements.txt
     - run: |
         envoy.code.check . -c glint shellcheck yamllint  -x ".*/dist/.*"