Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files(apiiro.com)
609 points by shmulc | 410 comments
Apiiro research blog post finding thousands of real secrets in public GitHub repos leaked via Claude Code's .claude/settings.local.json "don't ask again" allowlists.