Stop Claude Code from reading your .env with three deny rules
This story is from 2026-10-21. It is preserved in the archive; the latest stories are on the live feed.
An agent that can read any file in your repo can also read .env , and whatever it reads can end up in a prompt, a log, or a commit message. You don't need to trust it to behave. You can just say no in settings.json . The rules Put this in .claude/settings.json at the repo root so it applies to ever…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-21 01:07 · DEV Community — AI
Stop Claude Code from reading your .env with three deny rules