nosec multiline and imports

scripts/publish_bumpver_handler.py

@@ -41,7 +41,7 @@
 - git tag --delete 1.0.0 2.0.0 2.1.0 2.1.1 2.1.2 2.1.2.dev0 2.1.2.dev1
 """
 
-import subprocess
+import subprocess  # nosec
 import sys
 from typing import List, Set
 
@@ -76,9 +76,9 @@ def main():
     elif len(version_components) == 3:
         if component == "dev":
             # increment patch and begin at dev0 (e.g. 1.0.0 -> 1.0.1.dev0)
-            update_output = subprocess.run(
+            update_output = subprocess.run(  # nosec
                 ["bumpver", "update", "--patch", "--tag=dev", "-n"]
-            )  # nosec
+            )
         else:
             update_output = subprocess.run(["bumpver", "update", f"--{component}", "-n"])  # nosec
 

scripts/tag_with_current_version.py

@@ -1,14 +1,14 @@
 # This file is intended to be called by a github workflow
-import subprocess
+import subprocess  # nosec
 
 import toml
 
 
 def main():
     version: str = toml.load("pyproject.toml")["project"]["version"]
-    tag_output: subprocess.CompletedProcess = subprocess.run(
+    tag_output: subprocess.CompletedProcess = subprocess.run(  # nosec
         ["git", "tag", f"v{version}"]
-    )  # nosec
+    )
     if tag_output.returncode != 0:
         raise RuntimeError("failed to tag")