ImportantSecurity ·
Report: Apiiro Says Claude Code's "Don't Ask Again" Exposed Passwords in 1,122 Public GitHub Files. Check .claude/settings.local.json
Claude Code's docs say "Yes, and don't ask again" saves the approval as an allow rule in .claude/settings.local.json, which it keeps out of Git only through your global git excludes. Apiiro reportedly found passwords in 1,122 public GitHub copies of that file; we could not read Apiiro's post. Anthropic's Boris Cherny said the team is looking into prevention; no fix has shipped.
Read the full call

