Claude Code Learn how to merge passwords and API keys on GitHub. Thanks to "Yes, don't ask again" it turned out that when you confirm a command, the AI can save everything, including passwords, to /settings.local.json. And then this file accidentally flew to the public repository. Apiiro researchers found 2,539 secrets in 1994, including database passwords, SSH access, and AWS keys. Deleting a file does not save you; Jeet remembers everything. Well, it's convenient.