Using hash for Python libraries

.github/scripts/requirements-rhel-description.txt

@@ -1,2 +1,12 @@
-markdown==3.10.2
-requests==2.33.0
+certifi==2026.6.17 \
+    --hash=sha256:2227dcbaafe0d2f59279d1762ddddc37783ed4354594f194ffc31d20f41fc3db
+charset-normalizer==3.4.7 \
+    --hash=sha256:5649fd1c7bade02f320a462fdefd0b4bd3ce036065836d4f42e0de958038e116
+idna==3.18 \
+    --hash=sha256:7f952cbe720b688055e3f87de14f5c3e5fdaa8bc3928985c4077ca689de849a2
+markdown==3.10.2 \
+    --hash=sha256:e91464b71ae3ee7afd3017d9f358ef0baf158fd9a298db92f1d4761133824c36
+requests==2.33.0 \
+    --hash=sha256:3324635456fa185245e24865e810cecec7b4caf933d7eb133dcde67d48cee69b
+urllib3==2.7.0 \
+    --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897

.github/workflows/rhel_registry_description.yml

@@ -168,8 +168,7 @@ jobs:
         run: |
           set -Eeuo pipefail
 
-          python -m pip install --upgrade pip
-          pip install -r "$PYTHON_REQUIREMENTS_FILE"
+          python -m pip install --require-hashes --only-binary=:all: -r "$PYTHON_REQUIREMENTS_FILE"
 
       - name: Check description source
         env: