Claude Code settings files expose thousands of secrets on GitHub
This story is from 2026-11-07. It is preserved in the archive; the latest stories are on the live feed.
"Do not ask again" prompt leads to passwords, API keys, and more being shared.
Read the full story at Ars Technica AI ↗
Timeline · 13 reports
- 2026-11-09 17:24 · Ars Technica AI
Claude Code settings files expose thousands of secrets on GitHub - 2026-11-09 14:18 · DEV Community — AI
Claude Code's "Don't Ask Again" Secrets: The Git-Exclude Gap, What Scanners Miss, and a Pre-Commit Fix - 2026-11-09 06:22 · DEV Community — AI
Claude Code Leaked 2,539 Secrets Onto GitHub. I Checked My Own Repos the Same Morning - 2026-11-09 00:04 · DEV Community — Machine Learning
Apiiro Finds 2,539 Secrets Leaked By Claude Code Users On GitHub - 2026-11-08 18:56 · DEV Community — Machine Learning
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files - 2026-11-08 18:38 · DEV Community — AI
The File Claude Code Writes When You Choose "Don't Ask Again" - 2026-11-08 17:13 · DEV Community — AI
Don't Ask Again, Publish Forever: How a Claude Code Permission File Leaked 2,539 Secrets to GitHub - 2026-11-08 16:45 · DEV Community — AI
Claude Code's "Don't Ask Again" Leaked Developers' Secrets to Public GitHub — Explained Honestly - 2026-11-08 13:01 · r/ClaudeAI
If you ever clicked “Yes, and don’t ask again” in Claude Code, check one file before your next push - 2026-11-07 23:02 · DEV Community — AI
Claude Code's 'Don't Ask Again' Saved Secrets in 1,122 Public Files. 215 Beat Both Scanners - 2026-11-07 20:45 · Hacker News Front Page
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files - 2026-11-07 17:06 · DEV Community — AI
Claude Code's don't-ask-again file held 1,379 secrets in 1,122 public repos: what settings.local.json really saves - 2026-11-07 06:44 · The Hacker News (security)
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub