1 source · latest 36m

Claude Code approval feature exposed 2,539 secrets in 1,994 public GitHub repositories

RESEARCHClaude Coderedteam/daily · 1 source

Severity: Medium
Sources: 1

What happened

Research published on November 5 identified 2,539 distinct secrets across 1,994 public GitHub repositories. The exposure is traced to coding-agent configuration files, Git history and saved transcripts, and the research says Claude Code's "Yes, and don't ask again" approval can persist credential-bearing shell commands in .claude/settings.local.json. Exposed items included production database passwords, cloud credentials, API tokens and SSH material. The article does not give affected versions or a CVE, and it is truncated, so further remediation guidance is not available.

For security analysts · Written by AI from 1 source · Wrong?

What to do

Search your public GitHub repositories for .claude/settings.local.json files and remove any credentials they contain.
Rotate any database passwords, cloud credentials, API tokens or SSH keys that may have been stored in agent configuration files or Git history.

Written by AI from the sources, checked against them

Read the full story at the source