Claude Code's "don't ask again" feature leaked 2,539 secrets across 1,994 repos
emmanuelvivier · x · 2026-11-09
Security firm Apiiro found that Anthropic's Claude Code saved passwords, API keys and SSH logins in plain text to .claude/settings.local.json, which ended up in more than 1,000 public GitHub repositories.
- The search uncovered 1,122 files with at least one real secret, totaling 1,379 distinct secrets including database passwords, Supabase keys, SSH logins and AWS keys.
- Cause: choosing "Yes, and don't ask again" saved an allow rule to the local settings file; when the rule recorded an exact command rather than a pattern, any secret typed into it was saved too.
- Apiiro reproduced the behavior with Anthropic's current Opus 5.5 and Fable 5.1 models.
- Anthropic's Boris Cherny acknowledged the issue on Hacker News, but proposed fixes like auto mode and secret scanning may not fully solve it.
Related event: Claude Code "Don't Ask Again" Leaks Secrets Into 1,122 Public GitHub Files(6 posts)→
More from coding & agent
- Dev moves a massive site off Webflow to Next.js, saving just $40/month — kavirkaycee · 2026-11-09
- Agent red teaming isn't LLM red teaming: four failure modes jailbreak tests miss — Plastic_Secret1303 · 2026-11-09
- SwarmEvolve: 450 latent-space agents boost program search 5-13x — aigclink · 2026-11-09
- Dev builds no-auth MCP connector for trip planning to fix generic chatbot advice — Candid_Space · 2026-11-09
- Same Blender agent prompt, two models: mystery QoDuck builds a 1942 truck, Qwen builds a toy — Character-Apple-8471 · 2026-11-09
- FairPlay broken: text Claude an app tweak and it's on your phone in half an hour — TheZachMueller · 2026-11-09