Claude Code's "Don't Ask Again" Feature Caused 2,539 Secrets to Flow into Public GitHub Repositories
A study by Apiiro found that Claude Code's "Yes, and don't ask again" approval can write full shell commands containing credentials in plaintext to .claude/settings.local.json, and once committed to public GitHub repositories, 2,539 credentials were exposed across 1,994 repositories and 63 organizations. The report traces how a normal approval flow, gaps in built-in protections, and incomplete secret scanning turned developer convenience into a systemic leak path.