⚠️ Add .claude/settings.local.json to the project's .gitignore avoid credentials in command arguments and rotate any secrets already committed!
https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html
The Hacker NewsClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubClaude Code saves secrets in approved commands, exposing 2,539 credentials across 1,994 public GitHub repositories, Apiiro finds.
commit 6c299eb