From ccc82ead73b1cd756cd3b24ea6bb1d8d7faaa79c Mon Sep 17 00:00:00 2001
From: Ned Batchelder <ned@nedbatchelder.com>
Date: Wed, 24 Aug 2022 09:28:26 -0400
Subject: build: use --require-hashes to be very clear

---
 .github/workflows/coverage.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/coverage.yml')

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 254a9f24..687bede9 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -74,7 +74,7 @@ jobs:
           set -xe
           python -VV
           python -m site
-          python -m pip install -r requirements/tox.pip
+          python -m pip install --require-hashes -r requirements/tox.pip
 
       - name: "Run tox coverage for ${{ matrix.python-version }}"
         env:
-- 
cgit v1.2.1