Claude Code settings.local.json Secrets: GitHub, Docker Hub

GitGuardian researchers found tens of thousands of distinct secrets exposed in Claude Code settings files on public GitHub and Docker Hub repositories. The leaks occur because Claude Code permanently saves approved shell commands containing API keys and credentials into local project settings files, which are frequently committed to version control and bundled into container images. Open article →