eci: fixing bandit scan error

[agustinfrancesa]

No description provided.

[Copilot]

Pull Request Overview

This PR addresses a Bandit scan error by updating the CI workflow’s Python setup and checkout steps.

• Switch Python setup to use the minor version specifier 3.12 instead of a pinned patch.
• Remove explicit token and persist-credentials settings from the checkout step.

Comments suppressed due to low confidence (3)

.github/workflows/bandit.yml:30

• [nitpick] For reproducible CI builds, consider pinning to a specific patch version (e.g., '3.12.10') instead of a floating minor version.

        python-version: '3.12'

.github/workflows/bandit.yml:27

• [nitpick] The step name was generalized from '3.12.10' to '3.12'; ensure this still clearly indicates which interpreter version is in use.

    - name: Set up Python 3.12

.github/workflows/bandit.yml:29

• Removing the explicit token and persist-credentials: false re-enables default credential persistence; verify this change doesn't expose unintended scopes or allow unauthorized pushes.

      with: