hardcoded-password-func-arg (S106)

Derived from the flake8-bandit linter.

What it does

Checks for potential uses of hardcoded passwords in function calls.

Including a hardcoded password in source code is a security risk, as an attacker could discover the password and use it to gain unauthorized access.

Instead, store passwords and other secrets in configuration files, environment variables, or other sources that are excluded from version control.

connect_to_server(password="hunter2")

Use instead:

import os

connect_to_server(password=os.environ["PASSWORD"])