Apiiro finds secrets in 1,122 public Claude Code project files

Top News · 598 HN points

Claude Code's “don't ask again” option saves approved shell commands in a project file. Apiiro found that credentials embedded in those commands ended up in public copies of that file on GitHub.

Here's what happened:

• Approved shell commands were recorded in the project file, including commands containing credentials.
• Apiiro found 104,185 public copies of the file on GitHub.
• Of those copies, 1,122 contained a real secret, making this an observed credential exposure rather than just a possible failure mode.

One catch: the ignore rule is local to the developer's machine, while the file lives inside the project. That mismatch means the protection can fail when code is shared, because the project file and the ignore rule do not travel together.

Sources: runtimewire.com