never push tokens to github, save them in os.env["token/name"] https://github.com/thecarrot123/FlaskSampleProject/blob/e3c713bf135a3d9dc452b7ce043cce875868398f/main/__init__.py#LL7C54-L7C54