Claude Code's 'Don't Ask Again' Saved Secrets Into 1,122 Public GitHub Files
A convenience feature in Claude Code, Anthropic's AI coding agent, has left real passwords and API keys sitting in public view on GitHub. Research published on November 5 by the security firm Apiiro found that when a developer approves a command with the option "Yes, and don't ask again," Claude Code saves that command word for word as a permission rule in a file called .claude/settings.local.json, inside the project folder. If the command contained a secret, the secret is saved with it, in plain text.