Claude Code's 'don't ask again' option linked to leaked secrets in public repos
GitGuardian and Apiiro findings show Claude Code's local settings file, which stores allowed commands, exposed thousands of API keys and credentials; Apiiro found 104,185 copies of .claude/settings.local.json in public repos, 1,122 containing secrets.
Read the full story at VentureBeat AI ↗
Timeline · 5 reports
- 2026-11-12 14:06 · DEV Community — AI
What your coding agent saves when you click "Don't ask again": a checklist for Foundry and Hardhat repos - 2026-11-11 23:29 · r/ClaudeAI
Heads up: Claude Code's "don't ask again" has been leaking secrets into public repos - 2026-11-11 12:03 · InfoWorld AI
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem - 2026-11-11 08:12 · DEV Community — AI
What "Don't Ask Again" Saves in Claude Code, and How to Audit It - 2026-11-10 00:51 · VentureBeat AI
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys?