[flake8-bandit] Report all references to suspicious functions (S3)

[InSyncWithFoo]

Summary

Resolves #15522.

Test Plan

cargo nextest run and cargo insta test.

[github-actions]

ruff-ecosystem results

Linter (stable)

✅ ecosystem check detected no linter changes.

Linter (preview)

ℹ️ ecosystem check detected linter changes. (+8 -0 violations, +0 -0 fixes in 2 projects; 53 projects unchanged)

apache/airflow (+7 -0 violations, +0 -0 fixes)

ruff check --no-cache --exit-zero --ignore RUF9 --no-fix --output-format concise --preview --select ALL

+ providers/src/airflow/providers/ftp/hooks/ftp.py:66:24: S321 FTP-related functions are being called. FTP is considered insecure. Use SSH/SFTP/SCP or some other encrypted protocol.
+ providers/src/airflow/providers/ftp/operators/ftp.py:201:24: S321 FTP-related functions are being called. FTP is considered insecure. Use SSH/SFTP/SCP or some other encrypted protocol.
+ providers/src/airflow/providers/ftp/sensors/ftp.py:84:20: S321 FTP-related functions are being called. FTP is considered insecure. Use SSH/SFTP/SCP or some other encrypted protocol.
+ providers/tests/ftp/sensors/test_ftp.py:54:28: S321 FTP-related functions are being called. FTP is considered insecure. Use SSH/SFTP/SCP or some other encrypted protocol.
+ providers/tests/ftp/sensors/test_ftp.py:67:28: S321 FTP-related functions are being called. FTP is considered insecure. Use SSH/SFTP/SCP or some other encrypted protocol.
+ providers/tests/ftp/sensors/test_ftp.py:80:28: S321 FTP-related functions are being called. FTP is considered insecure. Use SSH/SFTP/SCP or some other encrypted protocol.
+ tests/decorators/test_python.py:74:26: S307 Use of possibly insecure function; consider using `ast.literal_eval`

apache/superset (+1 -0 violations, +0 -0 fixes)

ruff check --no-cache --exit-zero --ignore RUF9 --no-fix --output-format concise --preview --select ALL

+ superset/migrations/versions/2023-05-01_12-03_9c2a5681ddfd_convert_key_value_entries_to_json.py:46:27: S301 `pickle` and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue

Changes by rule (3 rules affected)

code	total	+ violation	- violation	+ fix	- fix
S321	6	6	0	0	0
S307	1	1	0	0	0
S301	1	1	0	0	0

[InSyncWithFoo]

The ecosystem changes are mostly as expected, except for this:

@apache/airflow:

class FTPSHook(FTPHook):
    def get_conn(self) -> ftplib.FTP:
#                         ^^^^^^^^^^

Should references in type hints be reported?

[dhruvmanila]

Should references in type hints be reported?

I think we should ignore them which, I think, is what you've done as well in this PR.

[dhruvmanila]

Updating the docs with the new preview behavior and then will merge.