Claude Code's 'don't ask again' option tied to leaked secrets in public repos
Security researchers found 104,185 copies of .claude/settings.local.json in public repositories, with over 1,100 containing API keys and other credentials saved via Claude Code's 'don't ask again' permission option.
Read the full story at VentureBeat AI ↗
Timeline · 6 reports
- 2026-11-12 16:25 · DEV Community — AI
Claude Code's don't-ask-again wrote 1,379 secrets into public GitHub files: check your repos before you write another allow rule - 2026-11-12 14:06 · DEV Community — AI
What your coding agent saves when you click "Don't ask again": a checklist for Foundry and Hardhat repos - 2026-11-11 23:29 · r/ClaudeAI
Heads up: Claude Code's "don't ask again" has been leaking secrets into public repos - 2026-11-11 12:03 · InfoWorld AI
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem - 2026-11-11 08:12 · DEV Community — AI
What "Don't Ask Again" Saves in Claude Code, and How to Audit It - 2026-11-10 00:51 · VentureBeat AI
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys?