Claude Code settings files expose secrets in public GitHub repositories
Overview
AI security researchers at Apiiro found thousands of secrets, including database passwords, API tokens and root logins, in Claude Code settings files stored in public GitHub repositories.
The files are .claude/settings.local.json, where Claude Code saves a shell command when a user picks "Yes, and don't ask again." Sometimes the sensitive command text is stored unmasked.
Anthropic's documentation says this file is added to the global .gitignore list, which normally keeps it from being shared publicly. Apiiro's findings show the file still reaches public repositories in practice.
Written by AI from the articles below · updated Nov 9, 12:41 PM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
- Ars Technica · AINewsClaude Code settings files expose thousands of secrets on public GitHub
AIAI security researchers at Apiiro found thousands of secrets, including database passwords, API tokens, and root logins, in Claude Code settings files embedded in public GitHub repositories. The leak occurs when a user chooses "Yes, and don't ask again" for a shell command, which Claude Code stores in .claude/settings.local.json, sometimes with the sensitive command text unmasked. Anthropic's documentation says this file is added to the global .gitignore list, which normally keeps it from being shared publicly.
Heat Trend
- Current comparable heat
- 16
- Peak comparable heat
- 20Nov 9, 1:00 PM ET
- Change in past 24 hours
- –
The trend compares only continuously observed participants, so its scope may be smaller than the current heat total. Hover or tap for hourly heat; use arrow keys with a keyboard.