diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..027cf2a4ad
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,20 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      all-actions:
+        patterns: [ "*" ]
+    assignees:
+      - vicentebolea
+  - package-ecosystem: "docker"
+    directories:
+      - "/scripts/ci/images"
+      - "/scripts/ci/images/spack"
+      - "/scripts/ci/images/formatting"
+    schedule:
+      interval: "weekly"
+    assignees:
+      - vicentebolea
diff --git a/bandit.yml b/bandit.yml
deleted file mode 100644
index 4e8dad0348..0000000000
--- a/bandit.yml
+++ /dev/null
@@ -1,2 +0,0 @@
-# tell codacy / bandit to accept assert in python
-skips: ['B101']
diff --git a/requirements.txt b/requirements.txt
deleted file mode 100644
index b37ad6b79f..0000000000
--- a/requirements.txt
+++ /dev/null
@@ -1,8 +0,0 @@
-#This is a python requirements file
-#used by pip for ADIOS Python package installation.
-#Note that on HPC systems you likely want to build
-#mpi4py rather than pip installing it.
-
-numpy>=1.19
-mpi4py>=3.0.3
-