> ## Content Index
> Fetch the complete content index at: https://adjacent.media/llms.txt
> Use this file to discover other available public pages before exploring further.

# Claude Code Leaking API Keys and Secrets to Public GitHub
- URL: https://adjacent.media/signals/claude-code-leaking-api-keys-and-secrets-to-public-github/
- Published: 2026-11-11T11:15:49.000Z
- Updated: 2026-11-11T11:15:49.000Z
- Description: Anthropic’s Claude Code extension is committing unencrypted credentials to public repositories because developers aren’t aware that VS Code’s built-in settings sync persists sensitive configuration files. The gap has already exposed real API keys and database credentials.
- Author: Jonathan Greene
- Tags: #signal, theme-ai, ai safety, model deployment, security vulnerability

Source: [Ars Technica](https://arstechnica.com/ai/2026/11/claude-code-settings-files-expose-thousands-of-secrets-on-github/?ref=adjacent.media)

Anthropic's Claude Code extension is committing unencrypted credentials to public repositories because developers aren't aware that VS Code's built-in settings sync persists sensitive configuration files. The gap has already exposed real API keys and database credentials. As AI coding assistants integrate deeper into development environments and handle more authentication tokens, they're introducing new attack surfaces that neither users nor vendors have fully secured. Credential management in AI-assisted development remains an unsolved security problem.