Security firm Apiiro found that Claude Code's "don't ask again" feature for approved commands can save those commands verbatim into a project's settings file, secrets included. Researchers located the resulting file, often committed by mistake, in 1,122 public GitHub repositories, exposing passwords and API keys to anyone who looks. The findings are a reminder to review what gets written into local tool-permission files before pushing a repo public.
// source: thehackernews.com ↗