Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, according to software security company Apiiro, which found 1,122 public copies of the settings file. When a user selects “Yes, and don’t ask again,” Anthropic’s AI coding assistant can save the command word-for-word, including any secret it contains, in a project settings file that may later be committed to GitHub.