{
  "id": 19670487,
  "title": "Claude Code’s Secret-Leak Problem Puts AI Coding Agents on Trial",
  "url": "https://urgent.news/2026/11/12/claude-codes-secret-leak-problem-puts-ai-coding-agents-on-trial",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-12T16:00:01.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/spaisee/claude-codes-secret-leak-problem-puts-ai-coding-agents-on-trial-48a3"
  },
  "original_language": "en",
  "account": "Claude Code, Anthropic's command-line coding assistant, has faced criticism for potentially storing sensitive credentials in public code repositories due to a design choice that allows developers to save approval decisions. When a developer runs a command in Claude Code and selects \"Yes, and don't ask again,\" the tool can inadvertently save the command as an allow rule in a local configuration file. If the command contains sensitive information like database passwords, API tokens, or private keys, the secret may be written into the project's settings. This issue has led to a significant number of Claude Code settings files containing sensitive credentials being found in public GitHub repositories. While the exposure of these secrets might not necessarily mean they were actively used, it highlights the risk of sensitive material being stored in configuration files. The problem goes beyond user error, as it questions whether a production-ready coding agent should make it easy to store sensitive information in files that could be committed to version control. This situation raises concerns about the balance between convenience and security in AI coding agents.",
  "summary": "A convenience feature meant to keep developers moving has helped place credentials in public code repositories, raising a harder question than whether Claude Code can write software: can AI coding agents be trusted with the habits that keep software secure? A developer tells Claude Code to run a command. The tool asks for permission. The developer selects “Yes, and don’t ask again,” expecting the…",
  "key_points": [
    "Claude Code stores sensitive credentials in public repositories",
    "\"Yes, and don't ask again\" command saves allow rules",
    "Secret data may be committed to version control"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}