Apiiro public repository scan of saved Claude Code approval commands

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsClaude Code remembered approvals copied secrets into public settings files: Claude Code can persist a complete approved shell command when the user selects a remember-approval option, potentially copying literal credentials into project-local settings.

  How secrets get persisted: Bash allow rules and settings.local.json

• supportsClaude Code remembered approvals copied secrets into public settings files: Apiiro reported 2,539 probable secrets across 1,994 public repositories with saved Claude Code approval commands; the scan is a classification result and not proof that every credential remains usable.

  Apiiro survey: 2,539 probable secrets, 1,994 repositories and 104,185 settings files

• supportsClaude Code remembered approvals copied secrets into public settings files: Apiiro reports scanning 104,185 public copies of the project-local settings file, with 1,122 containing at least one real secret; the wider set it describes totals 2,539 secrets in 1,994 public repositories.

  Published report, opening scan findings and secret counts