Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by cerved on Saturday November 07, 2026 @06:33PM (#50409056)

Suggest adding it to ~/.config/git/ignore

and teach Claude to not git add .

While we're at it, maybe we can also discourage the spurious use of -f for rm -- me personal pet peave

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by wyager on Saturday November 07, 2026 @08:10PM (#50409623)

> and teach Claude to not git add .

It already doesn't do this. This is from users committing the `.claude` directory themselves.

[ Parent | on HN ]

Re:Claude Code's "Don't Ask Again" exposes passwords in 1,12... by hakanbogan on Sunday November 08, 2026 @08:31AM (#50413183)

I also use global ignore, but I think the key is to keep secrets out of commands. I store mine in .dev.vars, which Wrangler reads automatically. For production, I use wrangler secret put and enter them myself. I also told Claude to never read that file.

[ Parent | on HN ]