Invalid checking in hashlib plugin

[ericwb]

Describe the bug

The hashlib_insecure_functions.py plugin is checkin for arguments that don't exist. For example, there is no kwarg for 'name'. The actual signature of the function is:

>>> inspect.signature(hashlib.new)
<Signature (name, data=b'', **kwargs)>

>>> inspect.signature(hashlib.md5)
<Signature (string=b'', *, usedforsecurity=True)>

The hashlib_new_insecure_functions example also includes a bunch of invalid examples.

Reproduction steps

See https://docs.python.org/3/library/hashlib.html

hashlib.new(name, [data, ]*, usedforsecurity=True)

Expected behavior

The checking should be accurate to the function API.

Bandit version

1.7.4 (Default)

Python version

3.9

Additional context

No response