Adding the sha based version pinnig

melange.yaml

@@ -27,7 +27,8 @@ pipeline:
       "${{targets.destdir}}/app/.venv/bin/pip" install \
         --no-cache-dir \
         --only-binary :all: \
-        -r requirements.prod.txt
+        --require-hashes \
+        -r requirements.txt
 
   - name: Copy application source
     runs: |