id: no-flask-secret-key-literal
valid:
  - "app.secret_key = os.environ['SECRET_KEY']"
  - "app.config['SECRET_KEY'] = os.environ.get('SECRET_KEY')"
  - "app.secret_key = SECRET_KEY"
invalid:
  - "app.secret_key = 'super-secret-key-12345'"
  - |
    app = Flask(__name__)
    app.secret_key = "dev-key"
  - "app.config['SECRET_KEY'] = 'my-secret'"