Claude Code's 'don't ask again' permissions file found leaking secrets to public GitHub repos
This story is from 2026-11-08. It is preserved in the archive; the latest stories are on the live feed.
Claude Code's local permissions file, used to store 'don't ask again' approvals, has been committing API keys and credentials to hidden files that ended up in 1,122 public GitHub files, per GitGuardian and Apiiro research.
Read the full story at VentureBeat AI ↗
Timeline · 6 reports
- 2026-11-11 12:03 · InfoWorld AI
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem - 2026-11-11 08:12 · DEV Community — AI
What "Don't Ask Again" Saves in Claude Code, and How to Audit It - 2026-11-10 03:49 · VentureBeat AI
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys? - 2026-11-09 14:18 · DEV Community — AI
Claude Code's "Don't Ask Again" Secrets: The Git-Exclude Gap, What Scanners Miss, and a Pre-Commit Fix - 2026-11-08 18:56 · DEV Community — Machine Learning
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files - 2026-11-08 18:38 · DEV Community — AI
The File Claude Code Writes When You Choose "Don't Ask Again"