Claude Code 'Don't Ask Again' Option Linked to Thousands of Secrets Exposed on GitHub
Security firm Apiiro found 2,539 real secrets across 1,994 public GitHub repositories, including credentials in Claude Code settings files, git history, and agent transcripts, after users chose the 'don't ask again' permission option.
Read the full story at VentureBeat AI ↗
Timeline · 12 reports
- 2026-11-10 03:49 · VentureBeat AI
Did Claude Code’s ‘don’t ask again’ option accidentally expose your enterprise's passwords and keys? - 2026-11-09 14:18 · DEV Community — AI
Claude Code's "Don't Ask Again" Secrets: The Git-Exclude Gap, What Scanners Miss, and a Pre-Commit Fix - 2026-11-09 06:22 · DEV Community — AI
Claude Code Leaked 2,539 Secrets Onto GitHub. I Checked My Own Repos the Same Morning - 2026-11-09 00:04 · DEV Community — Machine Learning
Apiiro Finds 2,539 Secrets Leaked By Claude Code Users On GitHub - 2026-11-08 18:56 · DEV Community — Machine Learning
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files - 2026-11-08 18:38 · DEV Community — AI
The File Claude Code Writes When You Choose "Don't Ask Again" - 2026-11-08 17:13 · DEV Community — AI
Don't Ask Again, Publish Forever: How a Claude Code Permission File Leaked 2,539 Secrets to GitHub - 2026-11-08 16:45 · DEV Community — AI
Claude Code's "Don't Ask Again" Leaked Developers' Secrets to Public GitHub — Explained Honestly - 2026-11-08 13:01 · r/ClaudeAI
If you ever clicked “Yes, and don’t ask again” in Claude Code, check one file before your next push - 2026-11-07 23:02 · DEV Community — AI
Claude Code's 'Don't Ask Again' Saved Secrets in 1,122 Public Files. 215 Beat Both Scanners - 2026-11-07 20:45 · Hacker News Front Page
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files - 2026-11-07 17:06 · DEV Community — AI
Claude Code's don't-ask-again file held 1,379 secrets in 1,122 public repos: what settings.local.json really saves