MPT-5509 add bandit to precommit

Author: ffaraone

.pre-commit-config.yaml

@@ -1,20 +1,29 @@
 default_language_version:
     python: python3.12
 repos:
--   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
-    hooks:
-    -   id: check-added-large-files
-    -   id: check-toml
-    -   id: check-yaml
-        args:
-        -   --unsafe
-    -   id: end-of-file-fixer
-    -   id: trailing-whitespace
--   repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.8.2
-    hooks:
-    -   id: ruff
-        args:
-        - --fix
-    -   id: ruff-format
+    - repo: https://github.com/pre-commit/pre-commit-hooks
+      rev: v5.0.0
+      hooks:
+          - id: check-added-large-files
+          - id: check-toml
+          - id: check-yaml
+            args:
+                - --unsafe
+          - id: end-of-file-fixer
+          - id: trailing-whitespace
+    - repo: https://github.com/astral-sh/ruff-pre-commit
+      rev: v0.8.2
+      hooks:
+          - id: ruff
+            args:
+                - --fix
+          - id: ruff-format
+    - repo: https://github.com/PyCQA/bandit
+      rev: "1.8.0"
+      hooks:
+          - id: bandit
+            args:
+                - -c
+                - pyproject.toml
+                - -r
+                - .