ruff

c8dbe465 - [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)