Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Security firm Apiiro reports that 1,122 of about 104,000 public copies of Claude Code's .claude/settings.local.json on GitHub contain secrets, including database passwords and AWS keys. The file can store approved commands verbatim, and Claude Code excludes it only in the user's global git settings, not the project's .gitignore. Apiiro did not test whether the credentials work, and its figures could not be independently verified. Anthropic's Boris Cherny says the files were committed manually and that secret scrubbing is under study. Rotate exposed credentials before deleting the file.