Claude Code saves secrets in public GitHub repositories

Anthropic's Claude Code assistant stores commands verbatim in project settings files when users select "Don't ask again," exposing passwords and API keys. Security firm Apiiro discovered 1,122 public GitHub copies containing exposed secrets. Developers should review their Claude Code projects, disable auto-approval for sensitive commands, and rotate any exposed credentials immediately.