summaryrefslogtreecommitdiff
path: root/.github
diff options
context:
space:
mode:
authorNed Batchelder <ned@nedbatchelder.com>2022-08-24 09:28:26 -0400
committerNed Batchelder <ned@nedbatchelder.com>2022-08-24 09:49:12 -0400
commitccc82ead73b1cd756cd3b24ea6bb1d8d7faaa79c (patch)
tree4b30d786cadba409faf4baa2a49d35b95fc0ab43 /.github
parent3fac1386203b0ac74d028321759f03d97a2b053d (diff)
downloadpython-coveragepy-git-ccc82ead73b1cd756cd3b24ea6bb1d8d7faaa79c.tar.gz
build: use --require-hashes to be very clear
Diffstat (limited to '.github')
-rw-r--r--.github/workflows/coverage.yml2
-rw-r--r--.github/workflows/kit.yml4
-rw-r--r--.github/workflows/python-nightly.yml2
-rw-r--r--.github/workflows/quality.yml4
-rw-r--r--.github/workflows/testsuite.yml2
5 files changed, 7 insertions, 7 deletions
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 254a9f24..687bede9 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -74,7 +74,7 @@ jobs:
set -xe
python -VV
python -m site
- python -m pip install -r requirements/tox.pip
+ python -m pip install --require-hashes -r requirements/tox.pip
- name: "Run tox coverage for ${{ matrix.python-version }}"
env:
diff --git a/.github/workflows/kit.yml b/.github/workflows/kit.yml
index 6def5ac3..a60840f5 100644
--- a/.github/workflows/kit.yml
+++ b/.github/workflows/kit.yml
@@ -153,7 +153,7 @@ jobs:
- name: "Install tools"
run: |
- python -m pip install -r requirements/kit.pip
+ python -m pip install --require-hashes -r requirements/kit.pip
- name: "Build wheels"
env:
@@ -190,7 +190,7 @@ jobs:
- name: "Install tools"
run: |
- python -m pip install -r requirements/kit.pip
+ python -m pip install --require-hashes -r requirements/kit.pip
- name: "Build sdist"
run: |
diff --git a/.github/workflows/python-nightly.yml b/.github/workflows/python-nightly.yml
index ade8e2b1..5743dfbb 100644
--- a/.github/workflows/python-nightly.yml
+++ b/.github/workflows/python-nightly.yml
@@ -77,7 +77,7 @@ jobs:
- name: "Install dependencies"
run: |
- python -m pip install -r requirements/tox.pip
+ python -m pip install --require-hashes -r requirements/tox.pip
- name: "Run tox"
run: |
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index 2394b779..5483f7b8 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -49,7 +49,7 @@ jobs:
set -xe
python -VV
python -m site
- python -m pip install -r requirements/tox.pip
+ python -m pip install --require-hashes -r requirements/tox.pip
- name: "Tox lint"
run: |
@@ -75,7 +75,7 @@ jobs:
set -xe
python -VV
python -m site
- python -m pip install -r requirements/tox.pip
+ python -m pip install --require-hashes -r requirements/tox.pip
- name: "Tox doc"
run: |
diff --git a/.github/workflows/testsuite.yml b/.github/workflows/testsuite.yml
index b577120c..06ea8944 100644
--- a/.github/workflows/testsuite.yml
+++ b/.github/workflows/testsuite.yml
@@ -71,7 +71,7 @@ jobs:
set -xe
python -VV
python -m site
- python -m pip install -r requirements/tox.pip
+ python -m pip install --require-hashes -r requirements/tox.pip
# For extreme debugging:
# python -c "import urllib.request as r; exec(r.urlopen('https://bit.ly/pydoctor').read())"