VQV Signal
According to a post on X by @thecsguy, clicking "don't ask again" in Claude Code can save the exact approved command, password included, into .claude/settings.local.json. The post attributes to Apiiro the finding of 1,379 secrets this way, 379 of them database passwords, with 215 files missed by both gitleaks and TruffleHog. The headline puts the total at 1,122 public GitHub files. The post is a carried-over update.
According to a post on X by @thecsguy, clicking "don't ask again" in Claude Code can save the exact approved command, password included, into .claude/settings.local.json. The post attributes to Apiiro the finding of 1,379 secrets this way, 379 of them database passwords, with 215 files missed by both gitleaks and TruffleHog. The headline puts the total at 1,122 public GitHub files. The post is a carried-over update.
AI-assisted summary based on the listed source.
Clicking “don’t ask again” in Claude Code can save the exact approved command, password included, into .claude/settings.local.json; Apiiro says it found 1,379 secrets this way, 379 of them database passwords, with 215 files missed by both gitleaks and TruffleHog. Search your org for settings.local.json, rotate...
Developers and organizations using Claude Code could have credentials sitting in repositories without realizing it. The post recommends searching your organization for settings.local.json, rotating any secrets found, and purging them from git history. These figures come from Apiiro as relayed in the post, and VQV has not independently checked them.
VQV organizes public signals from inspectable sources. It does not independently verify the underlying report.
Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.
VQV surfaced this signal because it is recent, relevant to AI Coding Tools, connected to Scobleizer News Pulse (X).
No login, cookies, social SDKs, or automatic posting.
