Update CI to use pre-commit

Author: WilliamJamieson

.github/workflows/ci.yml

@@ -27,7 +27,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        toxenv: [ check-style, check-security, check-dependencies, check-build ]
+        toxenv: [ check-style, check-dependencies, check-build ]
         python-version: [ '3.11' ]
         os: [ ubuntu-latest ]
     steps:

tox.ini

@@ -1,6 +1,6 @@
 [tox]
 envlist =
-    check-{style,security,dependencies,build}
+    check-{style,dependencies,build}
     test{,-oldestdeps,-devdeps,-sdpdeps}{,-pyargs,-warnings,-regtests,-cov}
     build-docs
 isolated_build = true
@@ -15,20 +15,13 @@ isolated_build = true
 #
 
 [testenv:check-style]
-description = check code style, e.g. with flake8
 skip_install = true
+description = Run all style and file checks with pre-commit
 deps =
-    ruff
+    pre-commit
 commands =
-    ruff . {posargs}
-
-[testenv:check-security]
-description = run bandit to check security compliance
-skip_install = true
-deps =
-    bandit>=1.7
-commands =
-    bandit -r -ll -x jwst/*test*,jwst/**/*test*,jwst/fits_generator jwst scripts
+    pre-commit install-hooks
+    pre-commit run {posargs:--color always --all-files --show-diff-on-failure}
 
 [testenv:check-dependencies]
 description = verify that install_requires in setup.cfg has correct dependencies