Claude Code Hooks Caught a Secret Leak Before I Shipped It

Originally published at chudi.dev I ran a secret scanner on every project for months before I realized Claude Code was writing .env files with real credentials baked in. Not because it was malicious. Just because the context had a key, and it needed...