False positive for S608 when a string contains "delete from"

[dhruvmanila]

i have this problem :(

S608 Possible SQL injection vector through string-based query construction

logger.warning(f'The linked role <{1}> has been delete from the guild {2}')

Originally posted by @Arexils in #8723 (comment)

[dhruvmanila]

I think this is because the string contains "delete from" in the middle. The regex isn't anchored to the start:

ruff/crates/ruff_linter/src/rules/flake8_bandit/rules/hardcoded_sql_expression.rs

Lines 13 to 16 in 39ad6b9

	static SQL_REGEX: Lazy<Regex> = Lazy::new(|| {
	Regex::new(r"(?i)\b(select\s.+\sfrom\s|delete\s+from\s|(insert|replace)\s.+\svalues\s|update\s.+\sset\s)")
	.unwrap()
	});