Apiiro, an application security vendor, counted public copies of Claude Code's local permissions file, .claude/settings.local.json. Of 104,185 copies, 1,122 (1.1%) held a real secret.
In the News: November 7, 2026 (Extra 2)
Apiiro found real secrets in 1,122 public Claude Code permission files, saved when users approve a command that contains one.
Extra edition
Machine-readable
Download Markdown