AI
Claude Code's approval file left 2,539 secrets in public repositories
Apiiro counted 1,122 of 104,185 public copies of Claude Code's .claude/settings.local.json holding at least one real secret, 1,379 distinct values, and put the wider total at 2,539 secrets across 1,994 repositories at 63 organisations once git history, shared settings files and agent transcripts are included. Picking “Yes, and don't ask again” stores the approved command verbatim, password included, and the file is added to the developer's global git excludes rather than the project's .gitignore.