Skip to content
TopicTracker
From HackerNewsView original ↗
TranslationTranslation

Claude Code session URL is leaking into your Git history as of v2.1.179

Claude Code session URLs are leaking into Git history starting from version 2.1.179, potentially exposing sensitive session information through version control commits.

Background

- Claude Code is Anthropic's official command-line agent for coding tasks. - A user discovered that beginning with version 2.1.179, Claude Code embeds a unique session URL into Git commit metadata (e.g., `Co-Authored-By: Claude <noreply@anthropic.com>`) each time it autogenerates or amends a commit. This URL reveals the full transcript of the Claude session — including prompts, code diffs, and any confidential information discussed. - Because Git history is often public (on GitHub, GitLab, etc.) or shared within teams, anyone with access to the repository can follow that URL and view the entire raw conversation, unless Anthropic's session-sharing settings are manually restricted. - The issue is that the leak is silent: no warning is shown to the user, and opt-out requires setting an environment variable or configuration flag that most users won't know about. - This matters because it turns private development work into publicly accessible chat logs, breaking confidentiality.

Related stories

  • Better Models: Worse Tools

    7.5

    Newer Claude models sometimes invent extra keys in tool call arguments, breaking validation in Pi's edit tool. The author suspects post-training for Claude Code's forgiving harness makes alternative schemas fail. This suggests closed RL training can degrade general tool-use reliability.

  • llm-coding-agent 0.1a0

    2.0

    Simon Willison released llm-coding-agent 0.1a0, an experimental coding agent built on his LLM library. The agent provides tools for reading, editing, searching files and executing commands, and ships with a Python API and CLI. It was developed using Claude Code (Fable 5) via TDD with a spec-first approach, and is available as a slop-alpha on PyPI.

  • Truth Social Is Still Just Trump’s Blog

    2.0

    Truth Social remains an outlet primarily for Trump's own posts, while other administration officials continue using X. The platform functions as a blog-like channel for Trump's messages rather than a genuine social network competitor.