Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem

A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other secrets, according to findings by GitGuardian. The code security firm identified 31,088 distinct secrets in Claude Code’s “.claude/settings.local.json” files across 23,276 public GitHub... Weiterlesen: Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem