1122 public GitHub files leak secrets via Claude Code; auto-gitignore claim doesn't hold
PawelHuryn · x · 2026-11-08
An apiiro report found 1,122 public GitHub files exposing passwords via Claude Code's "Don't Ask Again" settings. Anthropic claims .claude/settings.local.json is auto-gitignored and the leaked files were "manually created and checked in."
Pawel Huryn tested this: 5 of his repos had the file written by Claude Code (March–August), none were ignored, and 2 were already committed. The catch: the ignore lives in your global git config, added only when Claude Code writes the file—older versions never did it, so existing files stay unprotected until rewritten.
Fixes:
- Manually add .claude/settings.local.json to each repo's .gitignore
- If already committed, git rm --cached it and rotate any tokens inside; git history keeps them
Related event: Claude Code 'Don't Ask Again' Leaks Secrets in 1122 Public GitHub Files(5 posts)→
More from coding & agent
- Dutch-Language Bug: A 15k-Char Prompt Made Devs Blame the Model for Their Own Mistake — Initial_Orange2985 · 2026-11-08
- zml team hits "RSI": DeepSeek 4.1 Flash token use exceeds Codex+Claude combined — RemiCadene · 2026-11-08
- Agent S4 lets agents evolve reusable computer-use interfaces from their own task experience — burkov · 2026-11-08
- Running 50-100 Agents, Dev Weighs Local Decision Models to Cut Latency — f1yingbanana · 2026-11-08
- This PM replaced the PRD with an interactive Claude artifact — PawelHuryn · 2026-11-08
- Spacedrop lets you drag-and-drop code to deploy in seconds, no GitHub push needed — saheedniyi_02 · 2026-11-08