# Apiiro finds secrets exposed by Claude Code files on GitHub

- Published: 2026-11-09T17:24:26.000Z
- Updated: 2026-11-11T10:03:14.164Z
- Section: Development
- Topics: Security, Code, Agents
- Page: https://aidailyjournal.com/en/n/2026/11/09/apiiro-finds-secrets-exposed-by-claude-code-files-on-github/
- Sources: [Ars Technica](https://arstechnica.com/ai/2026/11/claude-code-settings-files-expose-thousands-of-secrets-on-github), [Xataka](https://xataka.com/robotica-e-ia/pulsar-no-vuelvas-a-preguntar-claude-code-parecia-inofensivo-ha-acabado-filtrando-miles-contrasenas-github)

## Summary

Security researchers at Apiiro found more than 100,000 Claude Code “.claude/settings.local.json” files uploaded to public GitHub repositories. About 1,100 files from 63 organizations contained secrets such as database passwords, API tokens, private keys, SSH server logins and AWS keys. The issue occurs when users choose “Yes, and don’t ask again”: the approved command can be saved literally, including credentials. Although the file is normally excluded by the developer’s global “.gitignore”, that protection may not apply at the repository level, and Claude Code can commit the file without user input, Apiiro says. Secrets can also persist in repository forks after the original file is removed.

According to Xataka, Boris Cherny, who leads Claude Code, acknowledged on Hacker News that the tool did not scrub secrets from saved content and recommended using automatic mode and enabling repository secret scanning. He said the team is testing automatic-mode leak detection and a basic built-in scanner, with no announced timeline.

## Why it matters (editorial interpretation)

The case warns developers that persistent approvals and global exclusion rules may not prevent credentials from leaking into public repositories or forks. According to Boris Cherny, the team is testing leak detection in automatic mode and a basic built-in scanner, but has not announced a timeline.

_Summary written by AI Daily Journal in its own words, based on the sources above. For details, read the original articles._