Author: Simone Pelosi
Author Date: 2025-07-02 16:15:22 UTC

Improve security analysis and suppress false positives in static scanners

Replace assert statements with proper ValueError exceptions in production code
(credentials.py) to prevent issues in optimized Python bytecode
Fix type comparison issues using 'is' instead of '==' for RuntimeError checks
Add comprehensive security scanning to pre-commit hooks
Add appropriate # noqa comments for legitimate test patterns:
  - Test credentials in test files (S106)
  - OAuth endpoint constants (S105)
  - Intentional file permission tests (S103)
  - Test assertion statements (S101)
Add Coverity suppression comments for hardcoded secret patterns in keyring
service names ("launchpadlib" is not a secret, it's a service identifier)
Configure ruff security checks in pyproject.toml
Add ruff security-only hook to pre-commit for continuous monitoring
Maintain compatibility with existing flake8, black, and pyupgrade tools