Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

	Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files(apiiro.com)
	622 points by shmulc 4 days ago \| 422 comments
	tl;dr: Summary not available
	HN Discussion: ~Anthropic acknowledges the issue and will investigate mitigations while noting the file should be gitignored ↓Headline is misleading; the real cause is users committing local settings, not the button itself ↓Users should practice basic security hygiene with password managers and env vars rather than blame the tool ↑The underlying design flaw of storing full command strings with secrets is legitimate and needs fixing •Shares practical mitigations like ephemeral VMs, secret-scanning skills, or release repo workflows