a Futurum company
AI
Tom SmithNov 10, 2026

The Convenience Click That Put 2,539 Secrets on Public GitHub

A new Apiiro investigation reveals how Claude Code’s “don’t ask again” command approvals can inadvertently expose sensitive credentials in GitHub repositories. Researchers identified 2,539 distinct secrets across 1,994 repositories, including database passwords, API keys and SSH credentials. The findings highlight a growing security blind spot as AI coding agents quietly turn developer convenience into persistent security policy.

Agentic AIai