diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5af69bf21..dd945994d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -58,7 +58,7 @@ jobs:
     - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b  # v5.3.0
       with:
         python-version: "3.11"
-    - run: pip install -r .github/workflows/requirements.txt
+    - run: pip install --require-hashes -r .github/workflows/requirements.txt
     - run: |
         envoy.code.check . -c glint shellcheck yamllint  -x ".*/dist/.*"