All news
Claude Code's "don't ask again" writes secrets into a file that gets committed – check your repos
Security firm Apiiro reported on November 7 that Claude Code stores every command a user approves with "Yes, and don't ask again" – secret included, even one taken from a config file – in .claude/settings.local.json, a file that regularly ends up in Git. Across this file, its history and other agent files, Apiiro counted 2,539 real secrets in 1,994 public GitHub repositories.