Claude Code settings files expose secrets on GitHub
First seen Nov 9 Updated Nov 10, 17:18 UTC Heat 26 low evidence
A Bluesky post links to an Ars Technica article claiming that Claude Code settings files have exposed thousands of secrets on GitHub. The items give no further detail on which secrets or which files.
- What to do
- Check whether Claude Code settings files in your repos contain secrets, and rotate any that do.
- Who should care
- Developers who use Claude Code and commit its settings files to GitHub.
Why it matters: If the claim holds, committed Claude Code settings files may leak API keys, so developers should check their repos and rotate any exposed secrets.
Timeline
Discussion
-
Claude Code settings files expose thousands of secrets on GitHubbsky.app · Bluesky · 11 comments · 200 likes
Evidence
Low evidence: a single community post. Treat it as a claim until someone else confirms it.
Details written Nov 10, 17:17 UTC from the sources listed above.