switch from bandit tooling to the S ruff rule

Author: cibere

.github/workflows/tooling.yml

@@ -25,6 +25,5 @@ jobs:
           pyright: 'true'
           ruff-linter: 'true'
           ruff-formatter: 'true'
-          bandit: 'true'
           python-version: ${{ matrix.python-version }}
           requirements: 'requirements.txt'

plugin/plugin.py

@@ -242,7 +242,7 @@ async def handle_auto_doctype(self, data: PartialLibrary) -> Library | None:
             lib = cls.from_partial(data)
             try:
                 await lib.build_cache(self.session, self.webserver_port)
-            except:  # noqa: E722 #nosec
+            except:  # noqa: E722, S110
                 pass
             else:
                 return lib

pyproject.toml

@@ -24,6 +24,7 @@ select = [
     "PGH", # https://docs.astral.sh/ruff/rules/#pygrep-hooks-pgh
     "RET", # https://docs.astral.sh/ruff/rules/#flake8-return-ret
     "PLE", # https://docs.astral.sh/ruff/rules/#error-e_1
+    "S", # https://docs.astral.sh/ruff/rules/#flake8-bandit-s
 ]
 ignore = [
     "SIM105", # https://docs.astral.sh/ruff/rules/suppressible-exception/
@@ -36,6 +37,7 @@ ignore = [
     "ANN202", # https://docs.astral.sh/ruff/rules/missing-return-type-private-function
     "RUF006", # https://docs.astral.sh/ruff/rules/asyncio-dangling-task
     "F403", # https://docs.astral.sh/ruff/rules/undefined-local-with-import-star
+    "S101" # https://docs.astral.sh/ruff/rules/assert
 ]
 
 [tool.ruff.format]
@@ -44,14 +46,6 @@ indent-style = "space"
 skip-magic-trailing-comma = false
 line-ending = "auto"
 
-[tool.bandit]
-exclude_dirs  = [
-    ".github", "venv", "docs", "lib"
-]
-skips = [
-    "B101" # skip asssets as they are used for typing purposes
-]
-
 [tool.pyright]
 include = [
     "plugin","build_plugin.py", "main.py"