Claude Code's "Don't Ask Again" File Exposes Passwords and Keys in 1,122 Public GitHub Copies
jedisct1 · x · 2026-11-08
Security firm Apiiro found 1,122 public copies of Claude Code's .claude/settings.local.json on GitHub containing at least one secret. When users approve a shell command with "Yes, and don't ask again," the exact command— including any typed passwords or API keys—gets saved in plain text as an allow rule. One notified company confirmed its key was still live, and researchers reproduced the behavior with the latest models. Deleting the file doesn't undo the leak since older versions persist in git history and forks; the advice is to rotate every credential first, then clean up.
Related event: Claude Code 'Don't Ask Again' Leaks Secrets in 1122 Public GitHub Files(5 posts)→
More from coding & agent
- This PM replaced the PRD with an interactive Claude artifact — PawelHuryn · 2026-11-08
- Spacedrop lets you drag-and-drop code to deploy in seconds, no GitHub push needed — saheedniyi_02 · 2026-11-08
- Beam's technical report details its sandwich architecture — brandondamos · 2026-11-08
- LangChain's async subagents: orchestrator stays responsive while background workers run long tasks — hwchase17 · 2026-11-08
- 1122 public GitHub files leak secrets via Claude Code; auto-gitignore claim doesn't hold — PawelHuryn · 2026-11-08
- Saccadia Remote ships a read-only MCP gateway to inspect desktops without giving agents control — Plasmicon · 2026-11-08