Claude Code's 'don't ask again' choice leaked secrets into public GitHub repos
Apiiro found 2,539 secrets in 1,994 public repos because approving a command with 'Yes, and don't ask again' saved it, password included, to a project file that then got committed. It shows how an approval shortcut can quietly store sensitive data, so remembered permissions need clear scope and a visible record.
Related patterns:Approval gateConsent and dataActivity log