#secret-scanning on Hacker News

2 stories tagged secret-scanning, newest first.

Screenshot of apiiro.com: Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files (apiiro.com)

609 points by shmulc 6 days ago | 410 comments

Apiiro research blog post finding thousands of real secrets in public GitHub repos leaked via Claude Code's .claude/settings.local.json "don't ask again" allowlists.

secrets-leakage claude-code github coding-agents

Screenshot of github.com: Show HN: Stroq – a local audit of what your coding agent did and why

Show HN: Stroq – a local audit of what your coding agent did and why (github.com)

82 points by agybay_07 8 days ago | 29 comments

GitHub repository for Stroq, an open-source tool that finds leaked secrets in AI coding agent sessions and guards future sessions with local hooks tracing risky commands.

ai-agents claude-code secret-scanning prompt-injection

#secret-scanning on Hacker News

Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files(apiiro.com)

Show HN: Stroq – a local audit of what your coding agent did and why(github.com)

Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files (apiiro.com)

Show HN: Stroq – a local audit of what your coding agent did and why (github.com)