Skip to content
Hacker News · AI· z0al·· 3 hours agoSelectedAI score60

User Discovers Claude Code Reads Raw GitHub Token on Every Startup

Tell HN: Claude Code queries raw GitHub token on startup

AI guide

Claude Code defaults to executing `gh auth token --hostname github.com` on every startup to read the raw GitHub token. The author discovered this after configuring 1Password to authorize the `gh` command, which triggered frequent pop-up prompts at launch. The author subsequently wrapped the command via Nix to return a dummy token, finding it did not affect the tool's operation, and posted on Hacker News to ask about the design rationale behind this startup behavior.

Why it matters

The original post sheds light on Claude Code's credential-reading behavior at launch and attempts to circumvent it, helping developers evaluate security strategies for local sensitive credentials.

Source:Hacker News · AI · news.ycombinator.com