Claude Code's 'don't ask again' permissions file linked to thousands of leaked secrets on GitHub
Researchers found thousands of API keys and credentials exposed in public GitHub repos via Claude Code settings files, transcripts, and git history created when users approved commands with 'don't ask again'.
Read the full story at VentureBeat AI ↗
Timeline · 10 reports
- 2026-11-11 12:03 · InfoWorld AI
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem - 2026-11-11 08:12 · DEV Community — AI
What "Don't Ask Again" Saves in Claude Code, and How to Audit It - 2026-11-10 03:49 · VentureBeat AI
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys? - 2026-11-09 14:18 · DEV Community — AI
Claude Code's "Don't Ask Again" Secrets: The Git-Exclude Gap, What Scanners Miss, and a Pre-Commit Fix - 2026-11-09 06:22 · DEV Community — AI
Claude Code Leaked 2,539 Secrets Onto GitHub. I Checked My Own Repos the Same Morning - 2026-11-09 00:04 · DEV Community — Machine Learning
Apiiro Finds 2,539 Secrets Leaked By Claude Code Users On GitHub - 2026-11-08 18:56 · DEV Community — Machine Learning
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files - 2026-11-08 18:38 · DEV Community — AI
The File Claude Code Writes When You Choose "Don't Ask Again" - 2026-11-08 17:13 · DEV Community — AI
Don't Ask Again, Publish Forever: How a Claude Code Permission File Leaked 2,539 Secrets to GitHub - 2026-11-08 16:45 · DEV Community — AI
Claude Code's "Don't Ask Again" Leaked Developers' Secrets to Public GitHub — Explained Honestly