Security/applying security recommendations

[agustinfrancesa]

No description provided.

[Copilot]

Pull Request Overview

This PR applies security recommendations by standardizing dependency installation in various GitHub workflow files.

• Updates dependency installation commands in semantic-release, check-build, and bandit workflows to rely solely on requirements.txt.
• Removes individual pip install commands with explicit version pinning to streamline and consolidate dependency management.

Reviewed Changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File	Description
.github/workflows/semantic-release.yml	Replaces explicit dependency installs with a singular pip install from requirements.txt.
.github/workflows/check-build.yml	Simplifies the install dependencies step by removing explicit upgrades and package pinning.
.github/workflows/bandit.yml	Updates the dependency installation for Bandit to use requirements.txt in place of explicit installation.

Comments suppressed due to low confidence (2)

.github/workflows/semantic-release.yml:50

• Ensure that all key dependencies previously installed with explicit version pinning (pip upgrade, setuptools, wheel, python-semantic-release, build) are correctly specified with secured version constraints in requirements.txt to maintain the intended security posture.

      - name: Install dependencies

.github/workflows/bandit.yml:33

• Confirm that requirements.txt includes a securely pinned version for bandit[sarif] so that the vulnerability scanning remains consistent with the security recommendations.

      shell: bash