/usr/lib/python2.7/dist-packages/bandit/plugins/ is in python-bandit 0.13.2-3.
This file is owned by root:root, with mode 0o755.
..
/usr/lib/python2.7/dist-packages/bandit/plugins/__init__.py
/usr/lib/python2.7/dist-packages/bandit/plugins/asserts.py
/usr/lib/python2.7/dist-packages/bandit/plugins/blacklist_calls.py
/usr/lib/python2.7/dist-packages/bandit/plugins/blacklist_imports.py
/usr/lib/python2.7/dist-packages/bandit/plugins/crypto_request_no_cert_validation.py
/usr/lib/python2.7/dist-packages/bandit/plugins/exec.py
/usr/lib/python2.7/dist-packages/bandit/plugins/exec_as_root.py
/usr/lib/python2.7/dist-packages/bandit/plugins/general_bad_file_permissions.py
/usr/lib/python2.7/dist-packages/bandit/plugins/general_bind_all_interfaces.py
/usr/lib/python2.7/dist-packages/bandit/plugins/general_hardcoded_password.py
/usr/lib/python2.7/dist-packages/bandit/plugins/general_hardcoded_tmp.py
/usr/lib/python2.7/dist-packages/bandit/plugins/injection_paramiko.py
/usr/lib/python2.7/dist-packages/bandit/plugins/injection_shell.py
/usr/lib/python2.7/dist-packages/bandit/plugins/injection_sql.py
/usr/lib/python2.7/dist-packages/bandit/plugins/injection_wildcard.py
/usr/lib/python2.7/dist-packages/bandit/plugins/insecure_ssl_tls.py
/usr/lib/python2.7/dist-packages/bandit/plugins/jinja2_templates.py
/usr/lib/python2.7/dist-packages/bandit/plugins/mako_templates.py
/usr/lib/python2.7/dist-packages/bandit/plugins/secret_config_option.py
/usr/lib/python2.7/dist-packages/bandit/plugins/try_except_pass.py