From TFA:

> Often Claude commits the file itself. In 539 of the 1,105 repos with a real secret that we traced, a commit co-authored by Claude changed the file. Those commits name every recent model, from Sonnet 4.5 to Opus 5.5.

always was

It's the plaintext secrets that are harmful.

Yeah like... you are writing passwords on the command line? All of these are already leaking into your .bash_history or similar so what are you doing my dude...

I’ve set a hard rule for my agents to “never add all files, never commit all files, always reference the specific files you are adding or committing”

They violate it so regularly that my “git” command is now a wrapper, when the agent fucks up and tries to add/commit-all anyway, it now gets a nastygram error chiding it for not following instructions.

I just mount .git read-only in my sandbox. That way I don't need to worry about it violating my safeguards.