pi-lens

Version:

Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo

12 lines (11 loc) • 338 B

YAML

id: no-secret-in-env-var-name
valid:
  - 'PASSWORD = os.environ["DB_PASSWORD"]'
  - 'API_KEY = config.get("api_key")'
  - 'name = "alice"'  # not a secret-sounding name
  - 'count = 42'
invalid:
  - 'API_KEY = "sk-1234567890abcdef"'
  - 'secret = "super-secret-value"'
  - 'auth_token = "ghp_1234567890abcdef"'
  - "PASSWORD = 'hunter2'"