A security report says Anthropic's Claude Code coding tool has a permission option, labeled “Yes, and don't ask again,” that can store passwords and API keys in project settings, where they may later be pushed to public GitHub repositories.
Security · Claude Code
A convenience setting could leave secrets in public repositories
A security report says Claude Code's “Yes, and don't ask again” permission option can save passwords and API keys in project settings, where they may later be pushed to public GitHub repositories.
From permission shortcut to exposure
The path the report describes, step by step
STEP 1
Approve a command
Developer picks “Yes, and don't ask again” to cut down on repeated prompts.
→
STEP 2
Saved to project
Sensitive values may persist in project configuration instead of a single session.
→
STEP 3
Committed and pushed
The settings file goes into version control and can reach a public GitHub repository.
→
STEP 4
Visible to anyone
Automated scanners routinely search public repositories for exposed secrets.
What the report says
The “don't ask again” option can store passwords and API keys in project settings.
Those secrets may become public once the project is shared on GitHub.
Security teams advise keeping local config files out of version control.
Still unclear
Which configurations and tool versions are affected.
Whether the behavior has been reproduced or independently analyzed.
Whether Anthropic has commented or changed the behavior.
Practical takeaway
Treat any credential that reaches a public repository as compromised
Rotate the secret
Deleting the file does not remove copies from repository history or caches.
Keep config local
Exclude local settings files from version control.
Review before commit
Check settings files for stored credentials before every commit.
Avoid permanent approvals
Do not grant “don't ask again” for commands that involve secrets.
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...