1 source · latest 26m

Claude Code approval feature exposed 2,539 secrets in 1,994 public GitHub repositories

RESEARCHClaude Coderedteam/daily · 1 source

Severity: Medium
Sources: 1

What happened

Research published on November 5 found 2,539 distinct secrets across 1,994 public GitHub repositories. Exposure was traced to coding-agent configuration files, Git history and saved transcripts, with Claude Code's "Yes, and don't ask again" approval persisting credential-bearing shell commands in .claude/settings.local.json. Exposed material included production database passwords, cloud credentials, API tokens and SSH keys.

For IT people · Written by AI from 1 source · Wrong?

What to do

Search your public GitHub repositories for .claude/settings.local.json files and remove any credentials they contain.
Rotate any database passwords, cloud credentials, API tokens or SSH keys that may have been stored in agent configuration files or Git history.

Written by AI from the sources, checked against them

Read the full story at the source