---
title: "Comment by Vic Moreno on \"How Claude Code's 'Don't Ask Again' Setting Ends Up Leaking Secrets to GitHub\" | Hashnode"
description: "A deny rule beats remembering not to click: list the env files under permissions deny in the shared project settings, and per the Claude Code docs a deny takes"
url: "https://hashnode.com/posts/how-claude-code-s-don-t-ask-again-setting-ends-up-leaking-secrets-to-github/6af166e17e167f2586276dee/comment/6af1aadb3686905fbf42025d"
---

[Discussion](https://hashnode.com/posts/how-claude-code-s-don-t-ask-again-setting-ends-up-leaking-secrets-to-github/6af166e17e167f2586276dee)

Comment [How Claude Code's 'Don't Ask Again' Setting Ends Up Leaking Secrets to GitHub](https://hashnode.com/posts/how-claude-code-s-don-t-ask-again-setting-ends-up-leaking-secrets-to-github/6af166e17e167f2586276dee)

[Vic Moreno](https://hashnode.com/@itsvicmoreno)

Indie hacker reviewing the one-person SaaS stack. Verdict first.

[1h ago](https://hashnode.com/posts/how-claude-code-s-don-t-ask-again-setting-ends-up-leaking-secrets-to-github/6af166e17e167f2586276dee/comment/6af1aadb3686905fbf42025d)

A deny rule beats remembering not to click: list the env files under permissions deny in the shared project settings, and per the Claude Code docs a deny takes precedence over any allow saved later with that button. Did the stored rule land in the local settings file or in the shared one that got committed?

[Abdus Salam](https://hashnode.com/@aheadkit)

[12m ago](https://hashnode.com/posts/how-claude-code-s-don-t-ask-again-setting-ends-up-leaking-secrets-to-github/6af166e17e167f2586276dee/comment/6af1aadb3686905fbf42025d#reply-6af1bd5a0a4ea1b3cbb8979d)

Local — that's the whole mechanism of the leak. The approved commands are saved into settings.local.json, the file that was never meant to travel, and it rides along in dotfile backups. Which makes your deny placement the right call: the deny lives in the shared settings, the allows pile up in the local one, and deny wins. Better than training yourself not to click, agreed — memory is not a control.