@leenakhvn5:

leens
leens
Open In TikTok:
Region: GB
Saturday 14 November 2026 21:38:59 GMT
222
38
0
6

Music

Download

Comments

There are no more comments for this video.
To see more videos from user @leenakhvn5, please go to the Tikwm homepage.

Other Videos

Claude Code's
Claude Code's "Don't ask again" leaked secrets to GitHub Apiiro research (Nov 5, 2026): when you pick "Yes, and don't ask again" on a shell command, Claude Code saves that exact command, secret included, as an allow rule in .claude/settings.local.json in the project folder. Nothing in the repo's own .gitignore keeps it private, so it often gets committed. What Apiiro found on public GitHub: - 104,185 copies of the file; 1,122 hold a real secret (1,379 distinct secrets) - 379 database passwords, 122 Supabase service-role keys, 43 SSH logins, 42 GitHub/GitLab/npm tokens, 23 AWS keys - In 539 of 1,105 affected repos, a commit co-authored by Claude changed the file - gitleaks flagged 564 files, TruffleHog 643; 215 were flagged by neither - 734 more secrets survive only in git history; 2,539 secrets across 1,994 repos in total - Anthropic's Boris Cherny said on HN the team is "looking into what we can do to prevent this" What to do: 1. Rotate every key the file ever held, first 2. git rm --cached .claude/settings.local.json and add it to the repo's .gitignore 3. Delete rules with secrets from your local file 4. Reference secrets as $VARS, and approve patterns like Bash(npm run:*) instead of exact commands Source: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Keep keys out of commands, and pay less per token. AtmoRouter is the cheapest AI API gateway: one OpenAI-compatible endpoint for 100+ models, up to 95% off official price. atmorouter.dev #AI #ClaudeCode #Anthropic #Security #Secrets #GitHub #DevSecOps #Agents #API #Developers #AtmoRouter

About