Unclear It is not clear which mode the credential-file check applies in, or whether the list existed before this release.
What
Claude Code checks file paths to spot sensitive files. That check now includes a list of files where command-line tools keep saved logins:
- git's stored credentials
hosts.ymlfor the GitHub CLI (gh)credentials.dbandaccess_tokens.dbfor gcloud
This list applies only in a particular mode. Path segments that are unusually long are flagged in the same way.
Why
These files hold login details for other services, so the check can make Claude Code stop or ask you before reading them.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear which mode the credential-file check applies in, or whether the list existed before this release.