Claude Code's 'don't ask again' permissions file leaks secrets to public GitHub repos
This story is from 2026-11-08. It is preserved in the archive; the latest stories are on the live feed.
A Claude Code configuration file that stores local command permissions has exposed over 1,100 public GitHub files containing API keys, database credentials and other secrets, according to Apiiro and GitGuardian research.
Read the full story at VentureBeat AI ↗
Timeline · 5 reports
- 2026-11-11 12:03 · InfoWorld AI
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem - 2026-11-11 08:12 · DEV Community — AI
What "Don't Ask Again" Saves in Claude Code, and How to Audit It - 2026-11-10 03:49 · VentureBeat AI
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys? - 2026-11-09 14:18 · DEV Community — AI
Claude Code's "Don't Ask Again" Secrets: The Git-Exclude Gap, What Scanners Miss, and a Pre-Commit Fix - 2026-11-08 18:56 · DEV Community — Machine Learning
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files