Claude Code's "Don't Ask Again" Saved Passwords in 1,122 Public GitHub Files

Security firm Apiiro found secrets in more than 1,100 public copies of Claude Code's .claude/settings.local.json, the file where "Yes, and don't ask again" stores approved commands, sometimes with the password typed in. Learn why a local file keeps getting committed, what Postman's silent plugin installs into Claude Code and Codex mean for your agent's settings, and a five-minute check: untrack the file, read your allow rules, rotate exposed secrets, and approve command patterns instead of passwords.

Reporting checked 8 November 2026 from published research coverage, Anthropic's settings documentation, and Postman's public response; the five-minute check is a suggested routine, not a tested product. Includes a Railway affiliate advertisement.

Sources: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again https://runtimewire.com/article/claude-code-dont-ask-again-secrets-public-github-settings-files https://code.claude.com/docs/en/settings https://thenewstack.io/postman-plugin-coding-agents/ https://www.notebookcheck.net/Postman-added-itself-to-Claude-Code-and-Codex-without-asking.1442933.0.html

Includes a Railway affiliate advertisement. Find our links at https://aishows.cc; we may earn a commission.