Run bandit on components (#513)

Let's run bandit on the components as well.

.pre-commit-config.yaml

@@ -26,6 +26,7 @@ repos:
         types: [python]
         files: |
             (?x)^(
+                components/.*|
                 src/.*|
                 examples/.*|
                 tests/.*|

components/embedding_based_laion_retrieval/src/clip_client.py

@@ -91,7 +91,7 @@ def query(
             if image.startswith("http"):
                 return self.__search_knn_api__(image_url=image)
             else:
-                assert Path(image).exists(), f"{image} does not exist."
+                assert Path(image).exists(), f"{image} does not exist."  # nosec B101
                 return self.__search_knn_api__(image=image)
         elif embedding_input:
             return self.__search_knn_api__(embedding_input=embedding_input)

components/pii_redaction/src/pii_redaction.py

@@ -58,11 +58,12 @@ def random_replacements(n=10):
     letters = string.ascii_lowercase
     lettters_digits = string.ascii_lowercase + string.digits
     emails = [
-        "".join(random.choice(letters) for i in range(5)) + "@example.com"
+        "".join(random.choice(letters) for i in range(5)) + "@example.com"  # nosec B311
         for i in range(n)
     ]
     keys = [
-        "".join(random.choice(lettters_digits) for i in range(32)) for i in range(n)
+        "".join(random.choice(lettters_digits) for i in range(32))  # nosec B311
+        for i in range(n)
     ]
     ip_addresses = REPLACEMENTS_IP
     return {"EMAIL": emails, "KEY": keys, "IP_ADDRESS": ip_addresses}
@@ -72,11 +73,11 @@ def replace_ip(value, replacements_dict):
     """Replace an IP address with a synthetic IP address of the same format."""
     try:
         ipaddress.IPv4Address(value)
-        return random.choice(replacements_dict["IP_ADDRESS"]["IPv4"])
+        return random.choice(replacements_dict["IP_ADDRESS"]["IPv4"])  # nosec B311
     except ValueError:
         try:
             ipaddress.IPv6Address(value)
-            return random.choice(replacements_dict["IP_ADDRESS"]["IPv6"])
+            return random.choice(replacements_dict["IP_ADDRESS"]["IPv6"])  # nosec B311
         except ValueError:
             # this doesn't happen if we already use ipaddress filter in the detection
             print("Invalid IP address")
@@ -129,7 +130,9 @@ def redact_pii_text(text, secrets, replacements, add_references=False):
                 if secret["tag"] == "IP_ADDRESS":
                     replacement = replace_ip(secret["value"], replacements)
                 else:
-                    replacement = random.choice(replacements[secret["tag"]])
+                    replacement = random.choice(  # nosec B311
+                        replacements[secret["tag"]],
+                    )
                 replaced_secrets[secret["value"]] = replacement
             subparts.append(replacement)
             replaced_secrets[secret["value"]] = replacement

components/prompt_based_laion_retrieval/src/clip_client.py

@@ -96,7 +96,7 @@ def query(
             if image.startswith("http"):
                 return self.__search_knn_api__(image_url=image)
             else:
-                assert Path(image).exists(), f"{image} does not exist."
+                assert Path(image).exists(), f"{image} does not exist."  # nosec B101
                 return self.__search_knn_api__(image=image)
         elif embedding_input:
             return self.__search_knn_api__(embedding_input=embedding_input)

pyproject.toml

@@ -102,6 +102,6 @@ convention = "google"
 skips = ["B108", "B307", "B404", "B602"]
 
 [tool.bandit.assert_used]
-skips = ["tests/test_*.py"]
+skips = ["**/test_*.py", "**/*_test.py"]