Claude Code's 'Don't Ask Again' Option Leaks Secrets to GitHub

Security researchers found that Claude Code's 'Yes, and don't ask again' option stores approved commands, including secrets, in .claude/settings.local, leading to 1122 public copies on GitHub. Developers are urged to add the .claude directory to gitignore.

2026-11-07 ~ 2026-11-07 · 2 related posts

• Claude Code's 'Don't Ask Again' File Leaks Secrets in 1,122 Public GitHub Copies — Hesamation · 2026-11-07

1 near-duplicate retellings: Hesamation