exclude cpplint from bandit checks via command line

Author: ivikhrev

.bandit

@@ -7,8 +7,6 @@
 ### in both 'tests' and 'skips', this would be nonsensical and is detected by
 ### Bandit at runtime.
 
-exclude: /cmake/cpplint
-
 # Available tests:
 # B101 : assert_used
 # B102 : exec_used

ci/check-basics.py

@@ -150,7 +150,8 @@ def complain(message):
         all_passed = False
 
     print('running bandit...', flush=True)
-    if subprocess.run([sys.executable, '-m', 'bandit', '.', '-r', '-c', '.bandit'], cwd=OMZ_ROOT).returncode != 0:
+    if subprocess.run([sys.executable, '-m', 'bandit', '.', '-r', '-c', '.bandit',
+        '--exclude', './cmake/cpplint/cpplint.py'], cwd=OMZ_ROOT).returncode != 0:
         all_passed = False
 
     print('running documentation checks...', flush=True)