The discussion centers on whether Claude Code's 'Don't Ask Again' feature is at fault for leaking secrets into public repositories or if the issue stems entirely from user negligence in committing local settings files. Conversely, defenders argue that manual review is fundamentally unsustainable at scale and that the industry must shift toward automated approval or robust sandboxing despite current flaws.
429 readable replies · Supporting reply 1 · Supporting reply 2 · Supporting reply 3 · Supporting reply 4awslabs
git-secrets
Shell2015–2025
awslabs / git-secrets
git-secrets
Prevents you from committing secrets and credentials into git repositories
20Distinct people
23Mentions
0Explicit recommenders
13.4KGitHub stars
What to know before exploring
What it is
Prevents you from committing secrets and credentials into git repositories
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- trufflesecurity/trufflehog · linked in 4 of the same discussions
- michenriksen/gitrob · linked in 2 of the same discussions
- sirwart/ripsecrets · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 7:02:50 PM UTC.
Mentions over time
HN mentions by year23 dated mentions
Observed mentions: 2015-12-11 00:33:15 UTC to 2025-06-16 10:39:27 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 2 | 2 | 0 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 6 | 1 | 5 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 2 | 2 | 0 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 6 | 0 | 6 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
6 sourcesRPrplnt·Nov 22, 2017
You could have a git hook (even remote) that would check for pre-configured patterns and reject the push if it contains them.
Quick google yielded this https://github.com/awslabs/git-secrets
In Uber Paid Hackers to Delete Stolen Data on 57M Peoplegit-secrets is a pre-commit hook that regexp's out secrets and blocks commits
https://github.com/awslabs/git-secrets
In Uber Paid Hackers to Delete Stolen Data on 57M PeopleI remember someone posting something like this:
https://github.com/awslabs/git-secrets
In Spending 100K USD in 4.5 Days on Amazon Web ServicesPrevents you from committing secrets and credentials into Git repositories
2 points · Open discussionOpen source alternatives for Git repos (ideally run in the pipeline):
https://github.com/dxa4481/truffleHog - "Searches through git repositories for high entropy strings, digging deep into commit history"
https://github.com/ezekg/git-hound - "Hound is a Git plugin that helps prevent sensitive data from being committed into a repository by sniffing potential commits against PCRE regular expressions"
https://github.com/michenriksen/gitrob - "The tool will iterate over all public organization and member repositories and match filenames against a range of patterns for files that typically contain sensitive or dangerous information"
https://github.com/awslabs/git-secrets - "Prevents you from committing passwords and other sensitive information to a git repository"
In GitLeaks – Search engine for exposed secrets on GitHubA good a time as ever to mention AWS's provider-agnostic secrets-aware git hook that attempts to prevent this at the repository level [1]
[1] https://github.com/awslabs/git-secrets
In GitHub commit search: “remove password”