python manage.py check doesn't pass

[ghost]

What happened?

I hacked the django-crash-starter cookiecutter for deployment to Heroku (I removed anymail, caches and logging). The github repo is here: And I got it up and running(). I ran heroku run python manage.py check --deploy -a <app-name> and got this:

?: (security.W022) You have not set the SECURE_REFERRER_POLICY setting. Without this, your site will not send a Referrer-Policy header. You should consider enabling this header to protect user privacy.

What should've happened instead?

It should have passed the checks

Steps to reproduce

run python manage.py check --deploy