Claude Code's 'don't ask again' setting linked to thousands of leaked secrets on GitHub
Researchers found that Claude Code's 'don't ask again' option saves permissions to .claude/settings.local.json, and thousands of copies in public repos contain API keys and credentials; Apiiro counted 104,185 copies with 1,122 containing secrets.
Read the full story at VentureBeat AI ↗
Timeline · 5 reports
- 2026-11-11 23:29 · r/ClaudeAI
Heads up: Claude Code's "don't ask again" has been leaking secrets into public repos - 2026-11-11 12:03 · InfoWorld AI
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem - 2026-11-11 08:12 · DEV Community — AI
What "Don't Ask Again" Saves in Claude Code, and How to Audit It - 2026-11-10 00:51 · VentureBeat AI
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys? - 2026-11-09 14:18 · DEV Community — AI
Claude Code's "Don't Ask Again" Secrets: The Git-Exclude Gap, What Scanners Miss, and a Pre-Commit Fix