id: no-db-string-literal-password
valid:
  - "db = connect(host='localhost', user='root', password=DB_PASSWORD)"
  - "db = connect(host='localhost', user='root', password=os.environ['DB_PASSWORD'])"
  - "engine = create_engine('postgresql://user:pwd@host/db')"  # URL form, different
invalid:
  - "db = connect(host='localhost', user='root', password='secret123')"
  - "db = connect(password='')"