Agent settings become a source of credential exposure
GitGuardian reports finding 31,088 distinct secrets in public Claude Code local settings files.
What changed
The November 9 research identified 5,343 credentials that were valid when detected. Saved command approval rules can contain secrets. Settings also appeared in public Docker images.
Why it matters
Local agent settings and container build contents belong in the same credential-exposure checks as application source.
GitGuardian research
Announcement published November 9, 2026. This briefing is an original summary of the linked reporting or announcement.
Read the original