Claude Code’s “Yes, and Don’t Ask Again” Feature Exposes Passwords and API Keys on GitHub

Claude Code’s “Yes, and don’t ask again” approval option can persist credential-bearing shell commands in project configuration files, exposing passwords and API keys when developers commit them to GitHub. On November 5, Apiiro researchers Shmulik Cohen and Matan Giladi reported 2,539 distinct secrets across 1,994 public repositories. The findings... Weiterlesen: Claude Code’s “Yes, and Don’t Ask Again” Feature Exposes Passwords an…