I'm proposing adding bandit support to the extension.

I have implemented this integration locally and was planning to submit a PR once I've written tests. Would this contribution be accepted?

I considered solving this with a flake8 plugin, but I have a preference to using oss as "out-of-the-box" as possible.

More generally, this extension provides a great base for integrating linting tools with VS Code -- is it possible to abstract this further to the point where simple linters are able to be integrated without requiring code changes to the extension? The only variable parameters for Bandit were the message regex + default arguments; this could be specified in settings.