exec-builtin: flag non-call references in preview mode

crates/ruff_linter/resources/test/fixtures/flake8_bandit/S102.py

@@ -13,3 +13,12 @@ def _():
 def _():
     from builtin import exec
     exec('')  # No error
+
+# https://github.com/astral-sh/ruff/issues/28011
+list(map(exec, ["hi"]))  # Preview: Error
+foo = exec  # Preview: Error
+
+def _():
+    def exec(): ...
+
+    list(map(exec, []))  # Shadowed -- No error

crates/ruff_linter/src/checkers/ast/analyze/expression.rs

@@ -287,6 +287,7 @@ pub(crate) fn expression(expr: &Expr, checker: &Checker) {
                         Rule::SuspiciousInsecureCipherModeUsage,
                         Rule::SuspiciousMktempUsage,
                         Rule::SuspiciousEvalUsage,
+                        Rule::ExecBuiltin,
                         Rule::SuspiciousMarkSafeUsage,
                         Rule::SuspiciousURLOpenUsage,
                         Rule::SuspiciousNonCryptographicRandomUsage,
@@ -410,6 +411,7 @@ pub(crate) fn expression(expr: &Expr, checker: &Checker) {
                     Rule::SuspiciousInsecureCipherModeUsage,
                     Rule::SuspiciousMktempUsage,
                     Rule::SuspiciousEvalUsage,
+                    Rule::ExecBuiltin,
                     Rule::SuspiciousMarkSafeUsage,
                     Rule::SuspiciousURLOpenUsage,
                     Rule::SuspiciousNonCryptographicRandomUsage,

crates/ruff_linter/src/rules/flake8_bandit/mod.rs

@@ -98,6 +98,7 @@ mod tests {
     }
 
     #[test_case(Rule::BadFilePermissions, Path::new("S103.py"))]
+    #[test_case(Rule::ExecBuiltin, Path::new("S102.py"))]
     #[test_case(Rule::SuspiciousPickleUsage, Path::new("S301.py"))]
     #[test_case(Rule::SuspiciousEvalUsage, Path::new("S307.py"))]
     #[test_case(Rule::SuspiciousMarkSafeUsage, Path::new("S308.py"))]

crates/ruff_linter/src/rules/flake8_bandit/rules/suspicious_function_call.rs

@@ -11,6 +11,7 @@ use ruff_text_size::{Ranged, TextRange};
 use crate::Violation;
 use crate::checkers::ast::Checker;
 use crate::preview::is_suspicious_function_reference_enabled;
+use crate::rules::flake8_bandit::rules::ExecBuiltin;
 
 /// ## What it does
 /// Checks for calls to `pickle` functions or modules that wrap them.
@@ -1161,6 +1162,14 @@ fn suspicious_function(
             checker.report_diagnostic_if_enabled(SuspiciousEvalUsage, range)
         }
 
+        // Exec
+        // Calls to `exec` are reported by [`exec_used`]; here we only flag
+        // non-call references (see `suspicious_function_reference`) to avoid
+        // duplicate diagnostics.
+        ["" | "builtins", "exec"] if arguments.is_none() => {
+            checker.report_diagnostic_if_enabled(ExecBuiltin, range)
+        }
+
         // MarkSafe
         ["django", "utils", "safestring" | "html", "mark_safe"] => {
             if let Some(arguments) = arguments {

crates/ruff_linter/src/rules/flake8_bandit/snapshots/ruff_linter__rules__flake8_bandit__tests__preview__S102_S102.py.snap

@@ -0,0 +1,33 @@
+---
+source: crates/ruff_linter/src/rules/flake8_bandit/mod.rs
+assertion_line: 116
+---
+--- Linter settings ---
+-linter.preview = disabled
++linter.preview = enabled
+
+--- Summary ---
+Removed: 0
+Added: 2
+
+--- Added ---
+S102 Use of `exec` detected
+  --> S102.py:18:10
+   |
+17 | # https://github.com/astral-sh/ruff/issues/28011
+18 | list(map(exec, ["hi"]))  # Preview: Error
+   |          ^^^^
+19 | foo = exec  # Preview: Error
+   |
+
+
+S102 Use of `exec` detected
+  --> S102.py:19:7
+   |
+17 | # https://github.com/astral-sh/ruff/issues/28011
+18 | list(map(exec, ["hi"]))  # Preview: Error
+19 | foo = exec  # Preview: Error
+   |       ^^^^
+20 |
+21 | def _():
+   |