Security firm Apiiro says Claude Code's "Don't Ask Again" left passwords in 1,122 public GitHub files; Anthropic says the file is meant to stay local

Apiiro, an application-security company, says in a blog post that Claude Code's "Don't Ask Again" permission choice exposed passwords in 1,122 public GitHub files. The Hacker News thread about the post had 280 points and 199 comments by the evening of November 7, 2026, and 593 points and 401 comments by the evening of November 8.

According to commenters' reading of the post, Apiiro searched public repositories where people had committed their .claude/ folder and local settings, then looked in those files for approved commands that contain keys or passwords. These are the researchers' figures and a commenters' description; they are not independently confirmed.

A commenter who identifies as Boris from the Claude Code team wrote that Claude Code has not historically scrubbed secrets, as other tools exist for that, but that Anthropic is looking into what it can do to prevent this. They said .claude/settings.local.json is meant to stay local and is gitignored automatically when Claude creates it, so in these cases the files were created by hand and checked in. They also recommended auto mode over permission rules.