Say you have something like this:
def do_stuff(shell):
pass
Calling this function with any argument for shell will show S604, not just True as the warning/documentation implies.
do_stuff(shell="bash")
# S604 Function call with `shell=True` parameter identified, security issue
do_stuff(shell=123)
# S604 Function call with `shell=True` parameter identified, security issue