Claude Code's 'don't ask again' permissions file found leaking secrets to GitHub
A Claude Code configuration file that stores 'don't ask again' permission choices is exposing thousands of API keys and database credentials on GitHub, per Apiiro and GitGuardian findings, with scanners and git excludes missing the hidden file.
Read the full story at VentureBeat AI ↗
Timeline · 4 reports
- 2026-11-11 12:03 · InfoWorld AI
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem - 2026-11-11 08:12 · DEV Community — AI
What "Don't Ask Again" Saves in Claude Code, and How to Audit It - 2026-11-10 03:49 · VentureBeat AI
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys? - 2026-11-09 14:18 · DEV Community — AI
Claude Code's "Don't Ask Again" Secrets: The Git-Exclude Gap, What Scanners Miss, and a Pre-Commit Fix