ci: require hash for python install

Zxilly · Jun 12, 2024 · a190493 · a190493
1 parent 9b9457f
commit a190493
Show file tree

Hide file tree

Showing 4 changed files with 474 additions and 7 deletions.
diff --git a/.github/workflows/build-gsa.yml b/.github/workflows/build-gsa.yml
@@ -53,7 +53,7 @@ jobs:
 
       - name: Add python dependencies
         run: |
-          pip install -r scripts/requirements.txt
+          pip install -r scripts/requirements.txt --require-hashes
 
       - name: Cache test binaries
         uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2

diff --git a/.github/workflows/build-wasm.yml b/.github/workflows/build-wasm.yml
@@ -39,7 +39,7 @@ jobs:
 
       - name: Add python dependencies
         run: |
-          pip install -r scripts/requirements.txt
+          pip install -r scripts/requirements.txt --require-hashes
 
       - name: Download deps
         run: go mod download

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -61,7 +61,7 @@ jobs:
 
       - name: Add python dependencies
         run: |
-          pip install -r scripts/requirements.txt
+          pip install -r scripts/requirements.txt --require-hashes
 
       - name: Download UI file
         uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7