---
title: "Discussion on \"How one click put passwords on GitHub: coding agents, allow lists and leaked secrets\" | Hashnode"
description: "Discussion on \"How one click put passwords on GitHub: coding agents, allow lists and leaked secrets\". Apiiro found a real secret in 1,122 public copies of one Claude Code settings file. Here is how a password gets from your terminal into a public repo, why deleting the file does not fix it, and what to do instead."
url: "https://hashnode.com/posts/how-one-click-put-passwords-on-github-coding-agents-allow-lists-and-leaked-secrets/6af1ed4115956fa8de00599b"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [How one click put passwords on GitHub: coding agents, allow lists and leaked secrets](https://systemdesignacademy.hashnode.dev/how-one-click-put-passwords-on-github-coding-agents-allow-lists-and-leaked-secrets?utm_source=hashnode&utm_medium=feed)

Apiiro found a real secret in 1,122 public copies of one Claude Code settings file. Here is how a password gets from your terminal into a public repo, why deleting the file does not fix it, and what to do instead.

2d ago · 7 min read · systemdesignacademy.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#git](https://hashnode.com/tag/git)
-   [#github](https://hashnode.com/tag/github)
-   [#ai-agents](https://hashnode.com/tag/ai-agents)
-   [#devsecops](https://hashnode.com/tag/devsecops)

## Written by

[RONI DAS](https://hashnode.com/@ronidas)

@ronidas · India

  
[View profile](https://hashnode.com/@ronidas)

AI engineering, agentic memory, machine learning, and system design at scale.

I work on AI systems and the infrastructure they actually run on: agentic architectures, memory for agents, retrieval, and the graph and data layers that keep model output grounded in something real. Formerly at Neo4j. I also write and teach the systems side that most AI content skips, from distributed systems and databases to the design decisions that decide whether a model ever reaches production. I run Total Technology Zonne on YouTube and I am building systemdesign.academy, an interactive course on system design, machine learning, and AI engineering, covering the parts most tutorials leave as an exercise for the reader. Mock interviews and prep packs: topmate.io/roni

## Responses

Markdown supported · ⌘↵ to post

No responses yet.