Claude Code 'Don't Ask Again' Setting Leaks Secrets on GitHub

Security firm Apiiro found that Anthropic's Claude Code coding assistant can save approved terminal commands—including passwords and API keys—verbatim into a project settings file when users select 'Yes, and don't ask again.' Researchers identified 1,122 public GitHub repositories containing these settings files with exposed secrets.

Disclosed 6 November 2026 · Record updated 7 November 2026

Impact

Passwords and API keys typed into approved commands were stored in plaintext in a Claude Code settings file, which developers then committed to public GitHub repositories, exposing the secrets to anyone.

Our coverage

Incidents

Claude Code setting leaves secrets in 1,122 public repos

Security firm Apiiro says Anthropic's coding assistant can write approved terminal commands, passwords and keys included, straight into a file developers commit.

7 Nov 2026

Sources

thehackernews.comhttps://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html