
Securitystrong signal
Claude Code’s “don’t ask again” option has put more than 2,500 secrets into public GitHub repositories
Approving a command permanently copies the command, password included, into a project settings file that often gets committed. The security firm Apiiro counted 1,122 public copies of that file holding a real secret. Anthropic says it is looking at ways to prevent it.
Apiiroverified