[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"news-post-\u002Ffr\u002Fnews\u002Fclaude-code-ne-plus-demander-secrets-github":3,"news-related-fr-\u002Ffr\u002Fnews\u002Fclaude-code-ne-plus-demander-secrets-github":311,"hreflang-claude-code-dont-ask-again-secrets-2026-11":331},{"doc":4,"redirect":8},{"id":5,"title":6,"author":7,"author_avatar":8,"body":9,"category":291,"date":292,"description":293,"extension":294,"image":295,"meta":296,"navigation":297,"path":298,"seo":299,"seoDescription":300,"seoTitle":301,"stem":302,"tags":303,"translationKey":309,"updatedAt":8,"__hash__":310},"news_fr\u002Ffr\u002Fnews\u002Fclaude-code-ne-plus-demander-secrets-github.md","L'option « ne plus demander » de Claude Code a laissé des mots de passe dans 1 122 fichiers publics sur GitHub","Paul Lefizelier",null,{"type":10,"value":11,"toc":280},"minimark",[12,37,58,71,76,92,105,111,115,129,141,150,154,160,166,172,181,185,198,202,222,226,237,270,274],[13,14,15,16,24,25,30,31,36],"p",{},"Apiiro a ",[17,18,23],"a",{"href":19,"rel":20,"target":22},"https:\u002F\u002Fapiiro.com\u002Fblog\u002Fcoding-agents-leaking-secrets-github-dont-ask-again",[21],"nofollow","_blank","indiqué le 5 novembre 2026"," que cliquer sur « Yes, and don't ask again » dans Claude Code, l'assistant de code d'Anthropic, peut enregistrer un mot de passe ou une clé API, mot pour mot, dans un fichier de projet ensuite publié sur GitHub. ",[17,26,29],{"href":27,"rel":28,"target":22},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F11\u002Fclaude-codes-dont-ask-again-file.html",[21],"The Hacker News"," et ",[17,32,35],{"href":33,"rel":34,"target":22},"https:\u002F\u002Fcybersecuritynews.com\u002Fclaude-codes-yes-and-dont-ask-again\u002F",[21],"Cyber Security News"," ont repris ces résultats le 7 novembre 2026.",[13,38,39,40,44,45,48,49,53,54,57],{},"Apiiro a interrogé GitHub public entre le 1er et le 3 novembre 2026 et a trouvé 104 185 copies de ",[41,42,43],"code",{},".claude\u002Fsettings.local.json"," dans 103 617 dépôts. Parmi elles, 1 122 (environ 1,1 %) contenaient au moins un « vrai secret » : une valeur au format d'une clé connue, ou un mot de passe ou un jeton à côté d'un hôte public. Ces fichiers regroupaient 1 379 secrets distincts. En ajoutant les versions plus anciennes, le ",[41,46,47],{},".claude\u002Fsettings.json"," partagé versionné volontairement et les journaux d'agents sauvegardés, le total monte à 2 539 secrets distincts dans 1 994 dépôts (",[17,50,52],{"href":19,"rel":51,"target":22},[21],"Apiiro",", ",[17,55,29],{"href":27,"rel":56,"target":22},[21],").",[13,59,60,61,64,65,53,68,57],{},"Apiiro n'a testé aucun secret et n'a contacté aucun hôte : « vrai secret » désigne un identifiant qui a passé ses détecteurs et une revue indépendante, non un identifiant prouvé valide (",[17,62,52],{"href":19,"rel":63,"target":22},[21],"). Une organisation prévenue les 2 ou 3 novembre a confirmé que sa clé exposée était encore active (",[17,66,52],{"href":19,"rel":67,"target":22},[21],[17,69,29],{"href":27,"rel":70,"target":22},[21],[72,73,75],"h2",{"id":74},"comment-un-secret-se-retrouve-dans-le-fichier","Comment un secret se retrouve dans le fichier",[13,77,78,79,84,85,88,89,91],{},"Par défaut, Claude Code demande l'autorisation avant d'exécuter la plupart des commandes shell. La ",[17,80,83],{"href":81,"rel":82,"target":22},"https:\u002F\u002Fcode.claude.com\u002Fdocs\u002Fen\u002Fsettings",[21],"documentation des réglages"," d'Anthropic indique que choisir « Yes, and don't ask again » sur une invite d'autorisation écrit une approbation permanente sous la forme d'une règle ",[41,86,87],{},"allow"," dans ",[41,90,43],{},", à l'intérieur du projet.",[13,93,94,95,53,98,101,102,57],{},"La règle, c'est la commande elle-même. Si la commande proposée par Claude contenait déjà un mot de passe de base de données ou un jeton API, ce secret est enregistré en clair avec l'approbation (",[17,96,52],{"href":19,"rel":97,"target":22},[21],[17,99,29],{"href":27,"rel":100,"target":22},[21],"). Apiiro affirme qu'il s'agit du comportement de Claude Code, et non d'une particularité d'un modèle : les chercheurs l'ont reproduit avec Opus 5.5 et Fable 5.1 d'Anthropic (",[17,103,52],{"href":19,"rel":104,"target":22},[21],[13,106,107,108,57],{},"Sur 16 agents de code comparés, Claude Code est le seul dont ils ont confirmé qu'il écrit par défaut la commande approuvée en entier dans un fichier du projet (",[17,109,52],{"href":19,"rel":110,"target":22},[21],[72,112,114],{"id":113},"une-protection-qui-ne-voyage-pas-avec-le-projet","Une protection qui ne voyage pas avec le projet",[13,116,117,118,121,122,125,126,57],{},"Le fichier est censé rester sur une seule machine. Les docs d'Anthropic précisent que, la première fois que Claude Code l'écrit dans un dépôt git, il ajoute ",[41,119,120],{},"**\u002F.claude\u002Fsettings.local.json"," aux exclusions git globales du développeur, afin que le fichier reste hors des commits sur cet ordinateur. Si quelqu'un crée le fichier à la main, il lui est demandé de l'ajouter lui-même au ",[41,123,124],{},".gitignore"," (",[17,127,83],{"href":81,"rel":128,"target":22},[21],[13,130,131,132,134,135,53,138,57],{},"Le constat d'Apiiro est que cette protection vit dans les réglages git d'un utilisateur, sur un ordinateur. Elle n'entre pas dans le ",[41,133,124],{}," du projet : elle ne suit donc pas le projet sur un autre clone, ne couvre pas un dossier qui devient un dépôt plus tard, et n'aide pas un fichier déjà commité (",[17,136,52],{"href":19,"rel":137,"target":22},[21],[17,139,83],{"href":81,"rel":140,"target":22},[21],[13,142,143,144,53,147,57],{},"Dans 539 des 1 105 dépôts contenant un secret que les chercheurs ont retracés, un commit indiquant Claude comme co-auteur avait modifié le fichier. Ils en déduisent que Claude commite souvent le fichier lui-même (",[17,145,52],{"href":19,"rel":146,"target":22},[21],[17,148,29],{"href":27,"rel":149,"target":22},[21],[72,151,153],{"id":152},"ce-qui-a-été-exposé","Ce qui a été exposé",[13,155,156,157,57],{},"Apiiro indique que 63 organisations détiennent un vrai secret dans une liste d'autorisations publique, pour la plupart des entreprises de logiciel de toutes tailles. Parmi les cas les plus nets qu'elle décrit, chacun vérifié à un commit figé, figurent la clé cloud de niveau administrateur d'un éditeur de bases de données, un mot de passe Azure Postgres de production, un jeton Square de production, et le mot de passe propriétaire de la base d'une application de dossiers médicaux (",[17,158,52],{"href":19,"rel":159,"target":22},[21],[13,161,162,163,57],{},"Plus d'un tiers des secrets présents dans les fichiers de réglages locaux actuels ouvrent directement une base de données, dont 379 mots de passe de bases et 122 clés de rôle de service Supabase. Les mêmes fichiers contenaient aussi 43 identifiants SSH vers des serveurs publics, 42 jetons GitHub, GitLab et npm, 23 clés AWS et 6 clés privées (",[17,164,52],{"href":19,"rel":165,"target":22},[21],[13,167,168,169,57],{},"Les 1 122 fichiers contenant un secret étaient encore sur la branche par défaut de leur dépôt le 2 novembre 2026 ; dans le dépôt médian, le fichier avait d'abord été commité 217 jours plus tôt. Le supprimer ne suffit pas : l'historique git contenait 734 autres secrets dans 509 dépôts, et 211 forks de 74 dépôts portaient les mêmes secrets (",[17,170,52],{"href":19,"rel":171,"target":22},[21],[13,173,174,175,177,178,57],{},"Les équipes versionnent aussi volontairement le ",[41,176,47],{}," partagé. Apiiro a trouvé des secrets dans 298 des 76 011 copies publiques de ce fichier, surtout dans des règles d'autorisation (",[17,179,52],{"href":19,"rel":180,"target":22},[21],[72,182,184],{"id":183},"pourquoi-les-scanners-en-manquent-beaucoup","Pourquoi les scanners en manquent beaucoup",[13,186,187,188,53,191,194,195,57],{},"Les chercheurs ont passé gitleaks et TruffleHog sur les 104 185 fichiers, sans vérification. Sur les 1 122 fichiers contenant un secret, gitleaks en a signalé 564 et TruffleHog 643 ; 215 n'ont été vus par aucun des deux, souvent parce qu'un mot de passe dans une commande ressemble à un mot ordinaire, pas à une clé reconnaissable (",[17,189,52],{"href":19,"rel":190,"target":22},[21],[17,192,29],{"href":27,"rel":193,"target":22},[21],"). La plupart de ces fichiers n'atteignent jamais GitHub et restent du JSON en clair sur la machine ; ils peuvent aussi sortir dans un paquet, une image Docker, une archive ou un dossier synchronisé (",[17,196,52],{"href":19,"rel":197,"target":22},[21],[72,199,201],{"id":200},"des-utilisateurs-lavaient-déjà-signalé","Des utilisateurs l'avaient déjà signalé",[13,203,204,205,210,211,214,215,218,219,57],{},"Des utilisateurs de Claude Code décrivent le même mécanisme sur GitHub depuis août 2025. Apiiro cite quatre signalements, dont la ",[17,206,209],{"href":207,"rel":208,"target":22},"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fclaude-code\u002Fissues\u002F5544",[21],"issue #5544",", selon laquelle des commandes bash approuvées contenant des identifiants étaient stockées telles quelles dans ",[41,212,213],{},"settings.local.json",". Les chercheurs, comme ",[17,216,29],{"href":27,"rel":217,"target":22},[21]," au 7 novembre 2026, indiquent qu'aucun de ces signalements n'a reçu de réponse d'Anthropic, et qu'une partie a été fermée automatiquement (",[17,220,52],{"href":19,"rel":221,"target":22},[21],[72,223,225],{"id":224},"ce-que-recommandent-les-chercheurs","Ce que recommandent les chercheurs",[13,227,228,229,30,231,233,234,57],{},"Le conseil d'Apiiro à quiconque utilise Claude Code est de chercher, dans son organisation GitHub et dans l'historique git de chaque dépôt, les fichiers ",[41,230,43],{},[41,232,47],{},". Si un fichier contient un identifiant, il faut d'abord renouveler ce mot de passe, ce jeton ou cette clé. Supprimer le fichier n'efface ni l'historique git, ni les forks, ni les clones des autres (",[17,235,52],{"href":19,"rel":236,"target":22},[21],[13,238,239,240,242,243,53,246,249,250,53,253,53,256,30,259,262,263,266,267,57],{},"Ils recommandent aussi de retirer le fichier local du suivi git, de l'ajouter au ",[41,241,124],{}," du projet, de supprimer toute règle d'autorisation qui contient encore un secret, de référencer les secrets par des variables plutôt que de les saisir dans les commandes, et d'approuver des motifs plutôt qu'une commande exacte (",[17,244,52],{"href":19,"rel":245,"target":22},[21],[17,247,29],{"href":27,"rel":248,"target":22},[21],"). Pour les équipes de sécurité, ils suggèrent de traiter les dossiers d'agents tels que ",[41,251,252],{},".claude\u002F",[41,254,255],{},".cursor\u002F",[41,257,258],{},".gemini\u002F",[41,260,261],{},".specstory\u002F"," comme porteurs de secrets, à l'image des fichiers ",[41,264,265],{},".env",", sur les ordinateurs portables comme dans les dépôts (",[17,268,52],{"href":19,"rel":269,"target":22},[21],[72,271,273],{"id":272},"pourquoi-cest-important","Pourquoi c'est important",[13,275,276,277,279],{},"Les agents de code sont désormais au milieu du travail quotidien : vérifier une base, appeler une API, lancer une migration. Un clic censé éviter une invite répétée peut écrire la commande entière — secret compris — dans un fichier facile à publier. L'écart documenté par Anthropic (une exclusion globale sur une machine, pas un ",[41,278,124],{}," de projet) et les chiffres d'Apiiro montrent à quelle fréquence ce fichier a déjà quitté l'ordinateur. La réponse pratique, selon les chercheurs : chercher le fichier, renouveler tout ce qu'il a contenu, et cesser de placer des secrets dans les commandes qu'un agent peut mémoriser.",{"title":281,"searchDepth":282,"depth":282,"links":283},"",2,[284,285,286,287,288,289,290],{"id":74,"depth":282,"text":75},{"id":113,"depth":282,"text":114},{"id":152,"depth":282,"text":153},{"id":183,"depth":282,"text":184},{"id":200,"depth":282,"text":201},{"id":224,"depth":282,"text":225},{"id":272,"depth":282,"text":273},"vibecoding","2026-11-08T08:00:00","La société de sécurité Apiiro a trouvé 1 122 copies publiques du fichier de réglages locaux de Claude Code contenant des secrets, après que « Yes, and don't ask again » a enregistré des commandes approuvées en clair.","md","\u002Fimages\u002Fnews\u002Fclaude-code-dont-ask-again-passwords-github.jpg",{},true,"\u002Ffr\u002Fnews\u002Fclaude-code-ne-plus-demander-secrets-github",{"title":6,"description":293},"Apiiro a trouvé 1 122 fichiers publics de réglages Claude Code contenant des secrets, après que l'option « ne plus demander » a enregistré des commandes approuvées en clair.","Claude Code « ne plus demander » : des secrets sur GitHub","fr\u002Fnews\u002Fclaude-code-ne-plus-demander-secrets-github",[304,305,306,307,308],"claude-code","anthropic","securite","github","vibe-coding","claude-code-dont-ask-again-secrets-2026-11","XX8CsfVTdiGLourihBAR1uTrcQGxigqC8SkhIAZqviM",[312,318,325],{"title":313,"description":314,"path":315,"date":316,"image":317,"category":291},"Les cloud agents Cursor construisent, hébergent et publient des apps live","Les cloud agents Cursor peuvent scaffolder une app web, provisionner Postgres et le SSO Cursor, lancer des contrôles de sécurité, puis publier une URL partageable — sans compte d'hébergement séparé.","\u002Ffr\u002Fnews\u002Fcursor-live-apps-agents-cloud-deploiement-postgres-auth","2026-11-07T08:00:00","\u002Fimages\u002Fnews\u002Fcursor-live-apps-cloud-agents-deploy-postgres-auth.jpg",{"title":319,"description":320,"path":321,"date":322,"image":323,"category":324},"Google rend Gemini Omni 1.2 Flash généralement disponible, avec des vidéos de 15 secondes","Google DeepMind baisse le prix d'Omni Flash de 30 %, à 0,07 $ par seconde en 720p, passe de 10 à 15 secondes de clip, et ouvre le modèle sur l'API Gemini et Google Cloud.","\u002Ffr\u002Fnews\u002Fgoogle-gemini-omni-1-2-flash-video-15-secondes","2026-11-06T08:00:00","\u002Fimages\u002Fnews\u002Fgoogle-gemini-omni-1-2-flash-15-second-video.jpg","ai",{"title":326,"description":327,"path":328,"date":329,"image":330,"category":324},"Anthropic aurait signé son premier accord de licence avec un éditeur, l'AP","Selon Adweek, Anthropic a conclu un accord de licence de contenus et de données avec l'Associated Press juste avant les élections de mi-mandat américaines, son premier avec un éditeur numérique. Aucune des deux entreprises ne l'a confirmé officiellement, et les conditions ne sont pas publiques.","\u002Ffr\u002Fnews\u002Fanthropic-premier-accord-licence-editeurs-associated-press","2026-11-05T12:35:00","\u002Fimages\u002Fnews\u002Fanthropic-ap-publisher-licensing-deal.jpg",{"en":332,"fr":600,"es":8},{"id":333,"title":334,"author":7,"author_avatar":8,"body":335,"category":291,"date":292,"description":590,"extension":294,"image":295,"meta":591,"navigation":297,"path":592,"seo":593,"seoDescription":594,"seoTitle":595,"stem":596,"tags":597,"translationKey":309,"updatedAt":8,"__hash__":599},"news_en\u002Fnews\u002Fclaude-code-dont-ask-again-passwords-github.md","Claude Code's “don’t ask again” left passwords in 1,122 public GitHub files",{"type":10,"value":336,"toc":581},[337,353,368,381,385,399,412,418,422,434,446,455,459,465,471,481,490,494,507,511,528,532,543,571,575],[13,338,339,340,344,345,348,349,352],{},"Security researchers at Apiiro ",[17,341,343],{"href":19,"rel":342,"target":22},[21],"reported on 5 November 2026"," that clicking “Yes, and don’t ask again” in Anthropic’s Claude Code can save a password or API key, word for word, into a project file that later ends up on public GitHub. ",[17,346,29],{"href":27,"rel":347,"target":22},[21]," and ",[17,350,35],{"href":33,"rel":351,"target":22},[21]," both covered the findings on 7 November 2026.",[13,354,355,356,358,359,361,362,53,365,57],{},"Apiiro searched public GitHub between 1 and 3 November 2026 and found 104,185 copies of ",[41,357,43],{}," across 103,617 repositories. Of those copies, 1,122 — about 1.1% — held at least one “real secret”: a value matching a known key format, or a password or token sitting next to a public host. Together those files held 1,379 distinct secrets. Counting older versions of the file, the shared ",[41,360,47],{}," that teams commit on purpose, and saved agent chat logs, Apiiro put the total at 2,539 distinct secrets across 1,994 repositories (",[17,363,52],{"href":19,"rel":364,"target":22},[21],[17,366,29],{"href":27,"rel":367,"target":22},[21],[13,369,370,371,374,375,53,378,57],{},"The company did not test whether any secret still worked, and it did not contact the hosts. In its method note, “real secret” means a credential that passed its detectors and an independent review, not one proven to be valid (",[17,372,52],{"href":19,"rel":373,"target":22},[21],"). One organisation the researchers notified on 2 or 3 November confirmed that its exposed key had been live (",[17,376,52],{"href":19,"rel":377,"target":22},[21],[17,379,29],{"href":27,"rel":380,"target":22},[21],[72,382,384],{"id":383},"how-a-secret-lands-in-the-file","How a secret lands in the file",[13,386,387,388,392,393,395,396,398],{},"By default, Claude Code asks before it runs most shell commands. Anthropic’s ",[17,389,391],{"href":81,"rel":390,"target":22},[21],"settings documentation"," says that choosing “Yes, and don’t ask again” on a permission prompt writes a standing approval as an ",[41,394,87],{}," rule in ",[41,397,43],{}," inside the project.",[13,400,401,402,53,405,408,409,57],{},"The rule is the command string itself. If the command Claude proposed already carried a database password or an API token, that secret is saved in plain text with the approval (",[17,403,52],{"href":19,"rel":404,"target":22},[21],[17,406,29],{"href":27,"rel":407,"target":22},[21],"). Apiiro says this is Claude Code’s own behaviour, not a quirk of one model: the researchers reproduced it with Anthropic’s Opus 5.5 and Fable 5.1 (",[17,410,52],{"href":19,"rel":411,"target":22},[21],[13,413,414,415,57],{},"Of 16 coding agents whose documentation they compared, Claude Code was the only one confirmed to write the full approved command to a project file by default (",[17,416,52],{"href":19,"rel":417,"target":22},[21],[72,419,421],{"id":420},"a-protection-that-does-not-travel-with-the-project","A protection that does not travel with the project",[13,423,424,425,427,428,430,431,57],{},"The file is meant to stay on one machine. Anthropic’s docs say that the first time Claude Code writes it in a git repository, it adds ",[41,426,120],{}," to the developer’s global git excludes, so the file stays out of commits on that computer. If someone creates the file by hand, they are told to add it to ",[41,429,124],{}," themselves (",[17,432,391],{"href":81,"rel":433,"target":22},[21],[13,435,436,437,439,440,53,443,57],{},"Apiiro’s point is that this protection lives in one user’s git settings on one computer. It does not go into the project’s own ",[41,438,124],{},", so it does not follow the project to another clone, cover a folder that becomes a repository later, or help a file that was already committed (",[17,441,52],{"href":19,"rel":442,"target":22},[21],[17,444,391],{"href":81,"rel":445,"target":22},[21],[13,447,448,449,53,452,57],{},"In 539 of the 1,105 repositories with a secret that the researchers traced, a commit listing Claude as a co-author had changed the file. They take this to mean Claude often commits the file itself (",[17,450,52],{"href":19,"rel":451,"target":22},[21],[17,453,29],{"href":27,"rel":454,"target":22},[21],[72,456,458],{"id":457},"what-was-exposed","What was exposed",[13,460,461,462,57],{},"Apiiro says 63 organisations hold a real secret in a public allow list, mostly software companies of all sizes. The strongest cases it describes, each checked at a pinned commit, include a database vendor’s own admin-level cloud key, a production Azure Postgres password, a Square production token, and the owner password of a medical-records app’s database (",[17,463,52],{"href":19,"rel":464,"target":22},[21],[13,466,467,468,57],{},"More than a third of the secrets in the current local-settings files open a database directly, including 379 database passwords and 122 Supabase service-role keys. The same files also held 43 SSH logins for public servers, 42 tokens for GitHub, GitLab and npm, 23 AWS keys and 6 private keys (",[17,469,52],{"href":19,"rel":470,"target":22},[21],[13,472,473,474,477,478,57],{},"Every one of the 1,122 files with a secret still sat on its repository’s default branch on 2 November 2026. In the median repository, the file had first been committed 217 days earlier (",[17,475,52],{"href":19,"rel":476,"target":22},[21],"). Deleting it is not enough: older versions in git history held another 734 secrets across 509 repositories that no longer appear in any current copy, and 211 forks of 74 repositories carried the same secrets (",[17,479,52],{"href":19,"rel":480,"target":22},[21],[13,482,483,484,486,487,57],{},"Teams also commit the shared ",[41,485,47],{}," on purpose. Apiiro found secrets in 298 of 76,011 public copies of that file, mostly inside allow rules (",[17,488,52],{"href":19,"rel":489,"target":22},[21],[72,491,493],{"id":492},"why-scanners-miss-many-of-them","Why scanners miss many of them",[13,495,496,497,53,500,503,504,57],{},"The researchers ran gitleaks and TruffleHog over all 104,185 local-settings files, without the tools’ verification step. Of the 1,122 files with a secret, gitleaks flagged 564 and TruffleHog flagged 643; 215 were flagged by neither. The usual miss, they say, is a password typed after a database or SSH password flag, or inside a request header — an ordinary word in an ordinary command, not a key in a recognisable format (",[17,498,52],{"href":19,"rel":499,"target":22},[21],[17,501,29],{"href":27,"rel":502,"target":22},[21],"). Most of these files never reach GitHub: they sit as plain JSON on the developer’s machine, and can also leave in a published package, a Docker image, a zip archive or a synced folder (",[17,505,52],{"href":19,"rel":506,"target":22},[21],[72,508,510],{"id":509},"users-reported-it-earlier","Users reported it earlier",[13,512,513,514,517,518,520,521,53,524,527],{},"Claude Code users have described the same mechanism on GitHub since August 2025. Apiiro cites four reports, including ",[17,515,209],{"href":207,"rel":516,"target":22},[21],", which said approved bash commands containing credentials were stored as-is in ",[41,519,213],{},". The researchers say none of those four reports received a reply from Anthropic, and that three were closed automatically as inactive or duplicates (",[17,522,52],{"href":19,"rel":523,"target":22},[21],[17,525,29],{"href":27,"rel":526,"target":22},[21],"). As of 7 November 2026, The Hacker News likewise reported no response from Anthropic on those issues.",[72,529,531],{"id":530},"what-the-researchers-recommend","What the researchers recommend",[13,533,534,535,348,537,539,540,57],{},"Apiiro’s advice to anyone who uses Claude Code is to search their GitHub organisation — and each repository’s git history — for ",[41,536,43],{},[41,538,47],{},". If a file holds a credential, rotate that password, token or key first. Removing the file does not clear git history, forks or other people’s clones (",[17,541,52],{"href":19,"rel":542,"target":22},[21],[13,544,545,546,548,549,53,552,555,556,53,558,53,560,348,562,564,565,567,568,57],{},"They also recommend untracking the local file and adding it to the project’s own ",[41,547,124],{},", deleting any allow rule that still contains a secret on the local machine, referring to secrets as variables instead of typing them into commands, and approving command patterns rather than one exact command (",[17,550,52],{"href":19,"rel":551,"target":22},[21],[17,553,29],{"href":27,"rel":554,"target":22},[21],"). For security teams, they suggest treating agent folders such as ",[41,557,252],{},[41,559,255],{},[41,561,258],{},[41,563,261],{}," as secret-bearing, like ",[41,566,265],{}," files, on laptops as well as in repositories (",[17,569,52],{"href":19,"rel":570,"target":22},[21],[72,572,574],{"id":573},"why-it-matters","Why it matters",[13,576,577,578,580],{},"Coding agents now sit in the middle of everyday work: checking a staging database, calling an API, running a migration. A convenience click meant to skip a repeated prompt can write the full command — secret included — into a file that is easy to publish. The gap Anthropic documents (a global ignore on one machine, not a project ",[41,579,124],{},") and the counts Apiiro published show how often that file has already left the laptop. The practical response is the one the researchers emphasise: look for the file, rotate anything it has ever held, and stop putting secrets in the commands an agent is allowed to remember.",{"title":281,"searchDepth":282,"depth":282,"links":582},[583,584,585,586,587,588,589],{"id":383,"depth":282,"text":384},{"id":420,"depth":282,"text":421},{"id":457,"depth":282,"text":458},{"id":492,"depth":282,"text":493},{"id":509,"depth":282,"text":510},{"id":530,"depth":282,"text":531},{"id":573,"depth":282,"text":574},"Security firm Apiiro found 1,122 public copies of Claude Code’s local settings file holding secrets, after “Yes, and don’t ask again” saved approved commands in plain text.",{},"\u002Fnews\u002Fclaude-code-dont-ask-again-passwords-github",{"title":334,"description":590},"Apiiro found 1,122 public Claude Code settings files holding secrets after “Yes, and don’t ask again” saved approved commands, including passwords, in plain text.","Claude Code “don’t ask again” leaked secrets on GitHub","news\u002Fclaude-code-dont-ask-again-passwords-github",[304,305,598,307,308],"security","2qoJ-CRpLanALsCWbQ_NFHBLT2KAtCHDVNJkSXTZjoE",{"id":5,"title":6,"author":7,"author_avatar":8,"body":601,"category":291,"date":292,"description":293,"extension":294,"image":295,"meta":794,"navigation":297,"path":298,"seo":795,"seoDescription":300,"seoTitle":301,"stem":302,"tags":796,"translationKey":309,"updatedAt":8,"__hash__":310},{"type":10,"value":602,"toc":785},[603,614,626,637,639,648,659,664,666,675,685,693,695,700,705,710,717,719,730,732,745,747,756,779,781],[13,604,15,605,24,608,30,611,36],{},[17,606,23],{"href":19,"rel":607,"target":22},[21],[17,609,29],{"href":27,"rel":610,"target":22},[21],[17,612,35],{"href":33,"rel":613,"target":22},[21],[13,615,39,616,44,618,48,620,53,623,57],{},[41,617,43],{},[41,619,47],{},[17,621,52],{"href":19,"rel":622,"target":22},[21],[17,624,29],{"href":27,"rel":625,"target":22},[21],[13,627,60,628,64,631,53,634,57],{},[17,629,52],{"href":19,"rel":630,"target":22},[21],[17,632,52],{"href":19,"rel":633,"target":22},[21],[17,635,29],{"href":27,"rel":636,"target":22},[21],[72,638,75],{"id":74},[13,640,78,641,84,644,88,646,91],{},[17,642,83],{"href":81,"rel":643,"target":22},[21],[41,645,87],{},[41,647,43],{},[13,649,94,650,53,653,101,656,57],{},[17,651,52],{"href":19,"rel":652,"target":22},[21],[17,654,29],{"href":27,"rel":655,"target":22},[21],[17,657,52],{"href":19,"rel":658,"target":22},[21],[13,660,107,661,57],{},[17,662,52],{"href":19,"rel":663,"target":22},[21],[72,665,114],{"id":113},[13,667,117,668,121,670,125,672,57],{},[41,669,120],{},[41,671,124],{},[17,673,83],{"href":81,"rel":674,"target":22},[21],[13,676,131,677,134,679,53,682,57],{},[41,678,124],{},[17,680,52],{"href":19,"rel":681,"target":22},[21],[17,683,83],{"href":81,"rel":684,"target":22},[21],[13,686,143,687,53,690,57],{},[17,688,52],{"href":19,"rel":689,"target":22},[21],[17,691,29],{"href":27,"rel":692,"target":22},[21],[72,694,153],{"id":152},[13,696,156,697,57],{},[17,698,52],{"href":19,"rel":699,"target":22},[21],[13,701,162,702,57],{},[17,703,52],{"href":19,"rel":704,"target":22},[21],[13,706,168,707,57],{},[17,708,52],{"href":19,"rel":709,"target":22},[21],[13,711,174,712,177,714,57],{},[41,713,47],{},[17,715,52],{"href":19,"rel":716,"target":22},[21],[72,718,184],{"id":183},[13,720,187,721,53,724,194,727,57],{},[17,722,52],{"href":19,"rel":723,"target":22},[21],[17,725,29],{"href":27,"rel":726,"target":22},[21],[17,728,52],{"href":19,"rel":729,"target":22},[21],[72,731,201],{"id":200},[13,733,204,734,210,737,214,739,218,742,57],{},[17,735,209],{"href":207,"rel":736,"target":22},[21],[41,738,213],{},[17,740,29],{"href":27,"rel":741,"target":22},[21],[17,743,52],{"href":19,"rel":744,"target":22},[21],[72,746,225],{"id":224},[13,748,228,749,30,751,233,753,57],{},[41,750,43],{},[41,752,47],{},[17,754,52],{"href":19,"rel":755,"target":22},[21],[13,757,239,758,242,760,53,763,249,766,53,768,53,770,30,772,262,774,266,776,57],{},[41,759,124],{},[17,761,52],{"href":19,"rel":762,"target":22},[21],[17,764,29],{"href":27,"rel":765,"target":22},[21],[41,767,252],{},[41,769,255],{},[41,771,258],{},[41,773,261],{},[41,775,265],{},[17,777,52],{"href":19,"rel":778,"target":22},[21],[72,780,273],{"id":272},[13,782,276,783,279],{},[41,784,124],{},{"title":281,"searchDepth":282,"depth":282,"links":786},[787,788,789,790,791,792,793],{"id":74,"depth":282,"text":75},{"id":113,"depth":282,"text":114},{"id":152,"depth":282,"text":153},{"id":183,"depth":282,"text":184},{"id":200,"depth":282,"text":201},{"id":224,"depth":282,"text":225},{"id":272,"depth":282,"text":273},{},{"title":6,"description":293},[304,305,306,307,308]]