What's wrong with this entry?
Anonymous. No account, no email.
What
A new CLAUDE_CODE_SUBPROCESS_ENV_SCRUB environment variable that, when enabled, strips sensitive credentials from the environment passed to subprocesses (like Bash tool invocations).
Usage
CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1 claudeDetails
- Removes API keys, OAuth tokens, and other secrets from subprocess environments
- Scrubbed variables include:
ANTHROPIC_API_KEY,AWS_SECRET_ACCESS_KEY,AWS_SESSION_TOKEN,GOOGLE_APPLICATION_CREDENTIALS,AZURE_CLIENT_SECRET, GitHub Actions tokens, and more - Also scrubs
INPUT_prefixed variants of all listed variables
Evidence
Environment scrubbing for subprocess execution (search for "CLAUDE_CODE_SUBPROCESS_ENV_SCRUB")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.