Apiiro finds Claude Code allow-rules stored over a thousand secrets
11/12/2026 — 11/12, 22:20·1 sources (all)·1 reports (all)
Key takeaways
- A study by Apiiro found that when users pick "don't ask again," Claude Code writes the full command verbatim into .claude/settings.local.jso…
Background & analysis
According to a DEV Community post published on November 12, 2026 at 22:06, the security firm Apiiro investigated how Claude Code stores allow rules. The post explains that Claude Code prompts the user before it runs a shell command, and one of the available answers is "Yes, and don't ask again". If that option is chosen, Claude Code writes the full command into .claude/settings.local.json as an allow rule, word for word. When the command contains a key, the file ends up holding that key as well.
The post states that Apiiro searched for this configuration file on public GitHub last week. Out of 104,185 copies of .claude/settings.local.json that it examined, 1,122 contained at least one real secret, including database passwords, SSH credentials, GitHub and npm tokens, and AWS keys. After also accounting for git history and shared configuration files, Apiiro says it found a total of 2,539 secrets spread across 1,994 repositories.
The available material consists of this single report, and its claims have not yet been corroborated or expanded by other sources. No further developments that can be verified from public reporting have emerged, so the matter currently rests at the stage of Apiiro's published findings as relayed through this post.
AI-generated from 1 reports · updated 22 hours ago
Related AI tools
- Heat index
- 52
- All sources
- 1
- All reports
- 1
- First seen
- 23 hours ago
Reports on this story headlines open the original
Apiiro looked at 104,185 copies of Claude Code's .claude/settings.local.json found on public GitHub and found 1,122 containing at least one real secret, according to a DEV Community write-up. Picking "don't ask again" stores the full shell command as an allow rule, so keys passed as flags end up in the file verbatim; counting git history and shared configs, Apiiro found 2,539 secrets across 1,994 repositories.
DEV Community · AIAI score 63
Other stories people are talking about
- Heat index 71Shared memory for Claude Code and Codex: pull it on demand, don't inject it1 sources
- Heat index 98NewDeveloper shares Claude Code context control and subagent model routing1 sources
- Heat index 188NewAnthropic Investigates Widespread Outages Affecting Claude Services2 sources
- Heat index 295Anthropic Launches Claude Meetings Beta for Google Meet6 sources
- Heat index 178NewAfter Anthropic Tightens Claude Access, Users Test Gemini 4 as Alternative2 sources
How is heat calculated?About the methodHide
Heat counts how many independent sources covered a story in the last 48 hours: one source counts once no matter how many posts it published, decaying with a 24-hour half-life. What ranks first is what many people are talking about.
This page aggregates public feeds. Headlines and summaries are machine-organized and remain the property of the original authors; verify important facts at the source. If you believe a headline or summary infringes your rights, email the contact address in the footer with the page URL and basis of your claim, and we will remove or replace it after review.
- Surge
- Discussion rising fast
- New
- First report within 6 hours
- Rising
- Still gathering discussion