From Dev.to
Why settings.local.json Leaks Secrets on GitHub and How to Fix It
A security scan across public GitHub repositories identified 1,122 configuration files exposing active credentials. The culprit was a common convenience feature in terminal coding agents: the "Yes, an...