Move 'PyCQA/bandit' check to github actions workflow; disable B101 check

Signed-off-by: Anatoly Myachev <[email protected]>

Author: anmyachev

.github/workflows/build-test.yml

@@ -84,6 +84,10 @@ jobs:
           pip install --upgrade pre-commit
           python3 -m pre_commit run --show-diff-on-failure --color=always --all-files --verbose
 
+          # to avoid changing `.pre-commit-config.yaml` common file
+          pip install bandit
+          bandit -c bandit.yaml -s "B101,B404,B603,B607" -r ./benchmarks/ ./scripts/ ./third_party/intel/
+
       - name: Save pip cache
         if: ${{ steps.pip-cache.outputs.status == 'miss' }}
         uses: ./.github/actions/save

.pre-commit-config.yaml

@@ -61,14 +61,6 @@ repos:
       files: ^.github/workflows/integration-tests.yml.*
       pass_filenames: false
 
-  - repo: https://github.com/PyCQA/bandit
-    rev: '1.7.9'
-    hooks:
-    - id: bandit
-      files: '^(benchmarks|scripts|third_party/intel)/.*\.py$'
-      args: ["-c", "bandit.yaml", "-s", "B404,B603,B607"]
-      stages: [pre-commit, pre-push, manual]
-
   - repo: https://github.com/pycqa/pylint
     rev: v3.2.6
     hooks: