Agents and CodeHigh importance

Claude Code's “Yes, and don’t ask again” left passwords and keys in 1,122 public files on GitHub

Apiiro analyzed 104,185 public copies of the .claude/settings.local.json file and found 1,122 (about 1.1%) with secrets, totaling 1,379 distinct credentials, including 379 database passwords, 43 SSH logins and 23 AWS keys. When the user approves an exact command with “Yes, and don’t ask again”, Claude Code saves the rule with the whole command, password included. Claude Code's protection (excluding the file from git) only works on the machine that created it. The gitleaks and TruffleHog scanners missed 215 of these files. Apiiro did not test the credentials; one company that was notified confirmed its key was live.