From 03fbcba0ab7d63ec0135f87ea1b5cf856dffd68f Mon Sep 17 00:00:00 2001
From: Alexey Pustovalov <alexey.pustovalov@zabbix.com>
Date: Fri, 26 Jun 2026 12:30:32 +0900
Subject: [PATCH] Using hash for Python libraries

---
 .github/scripts/requirements-rhel-description.txt | 14 ++++++++++++--
 .github/workflows/rhel_registry_description.yml   |  3 +--
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/.github/scripts/requirements-rhel-description.txt b/.github/scripts/requirements-rhel-description.txt
index 4cc23e41..e865cc96 100644
--- a/.github/scripts/requirements-rhel-description.txt
+++ b/.github/scripts/requirements-rhel-description.txt
@@ -1,2 +1,12 @@
-markdown==3.10.2
-requests==2.33.0
+certifi==2026.6.17 \
+    --hash=sha256:2227dcbaafe0d2f59279d1762ddddc37783ed4354594f194ffc31d20f41fc3db
+charset-normalizer==3.4.7 \
+    --hash=sha256:5649fd1c7bade02f320a462fdefd0b4bd3ce036065836d4f42e0de958038e116
+idna==3.18 \
+    --hash=sha256:7f952cbe720b688055e3f87de14f5c3e5fdaa8bc3928985c4077ca689de849a2
+markdown==3.10.2 \
+    --hash=sha256:e91464b71ae3ee7afd3017d9f358ef0baf158fd9a298db92f1d4761133824c36
+requests==2.33.0 \
+    --hash=sha256:3324635456fa185245e24865e810cecec7b4caf933d7eb133dcde67d48cee69b
+urllib3==2.7.0 \
+    --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897
diff --git a/.github/workflows/rhel_registry_description.yml b/.github/workflows/rhel_registry_description.yml
index 526ecea9..e1809248 100644
--- a/.github/workflows/rhel_registry_description.yml
+++ b/.github/workflows/rhel_registry_description.yml
@@ -168,8 +168,7 @@ jobs:
         run: |
           set -Eeuo pipefail
 
-          python -m pip install --upgrade pip
-          pip install -r "$PYTHON_REQUIREMENTS_FILE"
+          python -m pip install --require-hashes --only-binary=:all: -r "$PYTHON_REQUIREMENTS_FILE"
 
       - name: Check description source
         env: