Under the hood
Useful2 Signal4
A long list of credential-file environment variables now sits near sandbox scoping code.
What's wrong with this entry?
Anonymous. No account, no email.
CLAUDE_ENV_FILE
What
A new list names environment variables that point at credential and config files: AWS, Azure, GCP, Kubernetes, Docker, git, pip, Postgres, Vault, Consul, Nomad, Terraform, gpg, npm and gh, plus CLAUDE_ENV_FILE, CLAUDE_CODE_FEDERATION_CACHE_DIR and ANTHROPIC_IDENTITY_TOKEN_FILE.
Details
- It sits beside the existing proxy environment and temp-directory allowlists in the sandbox permission-scoping code, which suggests it decides which credential paths get special treatment under sandboxed execution.
- No function in this build reads the list, so nothing acts on it yet.
Evidence
CLOUDSDK_AUTH_ACCESS_TOKEN_FILE
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.