Skip to main content
EnterpriseSecurityTools

Claude Code is accidentally exposing secrets all over GitHub

Source: Ars Technica (opens in a new tab) · Kyle Orland

Intel Summary

Ars Technica reports that Claude Code settings files are inadvertently exposing credentials on GitHub. A "Do not ask again" prompt option reportedly causes users to share configuration files containing passwords, API keys, and other sensitive secrets in repositories.

Why It Matters

Developers using Claude Code face immediate risks of credential leakage and unauthorized system access via public repositories. Organizations adopting AI coding tools must verify secret-handling behaviors, audit commit histories, and rotate any credentials stored in tool configuration files.

Organizations & Entities