Security fix for profiling workflow

[leonardocarreras]

Avoids passing commands as inputs in script

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.18%. Comparing base (89667ab) to head (c3b0407).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #455      +/-   ##
==========================================
- Coverage   65.22%   65.18%   -0.04%     
==========================================
  Files         374      374              
  Lines       22723    22723              
  Branches    11240    11239       -1     
==========================================
- Hits        14820    14812       -8     
+ Misses       7902     7836      -66     
- Partials        1       75      +74     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[stv0g]

I dont see any changes in the diff, apart from whitespace changes?

[leonardocarreras]

The code is expanded as environment variables, then run

This is according to https://github.com/sogno-platform/dpsim/security/code-scanning/21