Claude Code Reportedly Exposing Secrets on GitHub Through Accidental Sharing

According to Ars Technica, users of Claude Code, an AI coding tool, are inadvertently exposing sensitive credentials on GitHub. The problem reportedly stems from a "Do not ask again" prompt, which causes the tool to proceed without further confirmation. As a result, passwords, API keys, and other secrets can end up being shared publicly. The report highlights the security risks of granting AI coding assistants persistent permissions over code repositories. Developers are advised to review their settings and avoid storing sensitive data where such tools can access it.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.


Discussion (0)
Log in to join the discussion and vote.
Log in