Vendor incident, severity medium
Claude Code "Don't ask again" saves secrets in settings file; 1,122 public GitHub copies expose them
Published
Apiiro reported that when a Claude Code user selects "Yes, and don't ask again", the assistant can save the approved command word-for-word, including any password or API key typed in it, in a project settings file. 1,122 public GitHub repositories contain copies of such files, so the secrets are readable by anyone.
What's affected
- anthropicevery version
What to do
- Check your repositories for the Claude Code project settings file and remove saved commands that contain secrets.
- Rotate any password or API key that was typed into a command approved with "don't ask again".
- Avoid committing the project settings file to public repositories.
Check whether you were affected
Pharon tells teams automatically when this affects something they run. To check a machine, run this in Claude Code with the Pharon plugin, in the repository that uses it:
/pharon:check-incident claude-code-dont-ask-again-secrets-2026-11References
Notice claude-code-dont-ask-again-secrets-2026-11, signed with key feed-prod-2026-10 (Ed25519). The Pharon CLI verifies the signature before using a notice.