CCM-17830: sonar security fixes

Author: Ian-Hodges

.github/workflows/build.yml

@@ -28,15 +28,15 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y ca-certificates curl gnupg
           sudo mkdir -p /etc/apt/keyrings
-          curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | sudo gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
+          curl --proto '=https' --tlsv1.2 -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | sudo gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
           NODE_MAJOR=20
           echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | sudo tee /etc/apt/sources.list.d/nodesource.list
 
       - name: Upgrade python packaging tools
-        run: python -m pip install --upgrade pip setuptools wheel
+        run: python -m pip install pip==26.1.2 setuptools==83.0.0 wheel==0.47.0
 
       - name: Install poetry
-        run: pip install poetry
+        run: pip install --only-binary :all: poetry==2.2.1
 
       - name: Cache poetry packages
         uses: actions/cache@v4