has anyone written pants plugins to run security checks? e.g. https://github.com/awslabs/git-secrets, https://github.com/dxa4481/truffleHog, https://github.com/albuch/sbt-dependency-check. o/w any pointers on how to write a plugin to call out to shell script? the last example is more involved has to check all the dep files