GitGuardian Finds 31,088 Secrets Leaked via Claude Code's settings.local.json Files

GitGuardian identified 31,088 distinct secrets, including database strings, cloud tokens, and SSH passwords, in Claude Code's .claude/settings.local.json files across 23,276 public GitHub repositories. Of these, 5,343 were still valid when detected, and some exposure extended to public Docker Hub images. The leaks stem from Claude Code saving full command strings, credentials included, when users select the 'Yes, and don't ask again' approval option.

Why it matters: IT and DevOps teams should audit repositories and Docker images for these config files and rotate any exposed credentials, since AI coding tools can silently turn approval prompts into secret storage.