Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
348 comments
- Points377
- Comments260
#5Rank now –
#5Peak rank
2Days on list
235Score · 7d
Nov 7, 2026First seen
Rank · 7 days
On Hacker News
- Points
- 377
- Comments
- 260
- Submitted by
- shmulc
- Posted
- Nov 7, 2026
- Site
- apiiro.com
Story details from Hacker News ↗ · linked article on apiiro.com.
Trending history
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files was first seen on Hacker News · Front page on Nov 7, 2026. Since then it has appeared in 72 checks on 2 different days. Its best position was #5 of 30, reached on Nov 8, 11:54 UTC. It is #5 right now, holding steady at #5 over the last 6 checks.
Rank history
Position on Hacker News · Front page at every check (lower is better).
Last 14 days
Best rank per day (UTC).
15
5
Oct 26today
Metric history
points as reported by Hacker News.
From the discussion
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
Boris from the Claude Code team here. Historically Claude Code has not done secret scrubbing (there are many good tools for that), but we are looking into what we can do to prevent this. That said, a few thoughts: 1. .claude/settings.local.json is meant to stay local. This is not a file you should check into source…
Confusing headline. They scanned for repos where people had committed their .claude/ folder and local settings and then scanned those files for commands which contained keys or passwords. So pressing “Don’t Ask Again” by itself doesn’t expose passwords by itself. If you commit your local Claude settings and in those…
This may not be a popular answer here, but it works as expected. Basic security hygiene means that you use password manager CLI, SSH agent, at worst temporary git-ignored env files, so that the secrets would never appear in the command line and you would never pass them to Claude. And you git-ignore any local…
Featured in
Archived daily, weekly and monthly lists that include this entry.
Hacker News 2 days, best #5
Questions
Is Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files trending on Hacker News right now?
Yes. As of Nov 8, 15:39 UTC it is #5, holding steady at #5 over the last 6 checks.
What is the highest rank Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files reached?
#5 on Hacker News · Front page, on Nov 8, 11:54 UTC. Trendoday checks this list every 15 minutes.
How long has Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files been trending?
It was first seen on Nov 7, 2026 and has been on the list on 2 days (72 checks) since.
How much discussion did it get on Hacker News?
377 points and 260 comments; submitted by shmulc on Nov 7, 2026.