Claude Code is accidentally exposing secrets all over GitHub
“Do not ask again” prompt leads to passwords, API keys, and more being shared.
TL;DR
- Claude Code's local settings files, containing sensitive information like passwords and API tokens, are being leaked on public GitHub repositories.
- The leak occurs when users approve commands with the "Yes, and don’t ask again" option, which stores the approval in a local settings file that can be accidentally committed to GitHub.
- While this settings file is usually ignored by git, its .gitignore setting is not repo-level, allowing accidental uploads when repositories are cloned or new folders become repositories.
- Apiiro researchers found over 100,000 instances of these settings files on GitHub, with approximately 1,100 containing secrets from 63 different organizations.
- Previous bug reports about this issue, dating back to August 2025, were closed due to inactivity without resolution.
- Claude Code's team is investigating the issue, with recommendations including using auto mode and secret scanners, although some popular scanners failed to detect certain leaked secrets.