[FEATURE] Add bandit hook to pre-commit-config.yaml

[ParagEkbote]

Is your feature request related to a problem? Please describe.

In #581, it seems that the configuration for bandit has been added to pyproject.toml. I think that adding its pre-commit hook could be useful for introducing static checks along with truffle-hog. WDYT?

cc: @begumcig

Describe the solution you'd like

Add bandit hook to pre-commit-config.yaml.

Additional context

N.A.

[begumcig]

Hi @ParagEkbote, thanks for the suggestion, it’s a good idea to bring static checks closer to development :)

We added Bandit since it’s already running through Codacy and gets enforced on every PR. We’ve also been discussing adding local static checks for security, but we’re currently aligning with the MLOps team on which tools we want to standardize on. (There is a chance we desert bandit and / or codacy as a whole)

We’ll revisit adding the bandit pre-commit hook once that decision is finalized and keep you posted!