Add bandit linting

examples/example.py

@@ -11,7 +11,7 @@
 # Change the following values to match your situation
 # city = "gent" # this used to be required, but is optional since January 2024
 username = "johndoe"
-password = "password"
+password = "password"  # noqa: S105
 account_id = "123456"
 
 print("\nFetching accounts...")

pyproject.toml

@@ -42,7 +42,8 @@ extend-select = [
     "SIM", # flake8-simplify, for simplified code
     "PTH", # pathlib (instead of os.path)
     "W",   # warning
-    "T2"
+    "T2",  # flake8-print (avoiding prints)
+    "S",   # bandit, security checks
 ]
 ignore = [
     "N818",   # error suffix in exception names
@@ -52,4 +53,5 @@ ignore = [
 
 [tool.ruff.lint.per-file-ignores]
 "**/tests/*" = ["T"]
-"examples/*" = ["T"]
+"examples/*" = ["T"]
+"**/tests*" = ["S101"] # Use of `assert` detected

tests/tst_mijnbibliotheek.py

@@ -1,3 +1,4 @@
+# ruff: noqa: S301  # suspicious-pickle-usage
 import configparser
 import pickle
 import sys