Apiiro researchers examined 104,185 public copies of Claude Code's local settings file and classified 1,122 of them as containing secrets. Choosing "Yes, and don't ask again" for a Bash command stores the whole approved command, including any password or key typed into it, as an allow rule. A wider review of git history, shared settings and transcripts counted 2,539 secrets across 1,994 repositories. Teams should rotate exposed credentials first, then ignore the file in the repository's own .gitignore and keep secrets out of command text.
