Keep Claude Code away from your .env files with permission deny rules

Claude Code reads files to help you. That is great, until the file is .env, a private key, or a cloud credentials folder. Permission deny rules let you block those reads outright. Minimal deny list In .claude/settings.json (shared with the team) or settings.local.json (personal), add these entries under permissions.deny: Read(./.env)... Weiterlesen: Keep Claude Code away from your .env files with permission deny rules