用户反映Claude Code启动时默认读取GitHub Token
Start here
2026年11月4日，有用户在Hacker News发帖反映，Claude Code在每次启动时都会默认执行“gh auth token --hostname github.com”并读取原始GitHub token。该用户是在配置1Password对gh命令进行授权后，因Claude Code启动时频繁触发授权弹窗而发现这一情况。该用户随后通过Nix包装该命令返回伪造token，测试发现并未影响Claude Code的正常运行，并在社区发帖求证该启动行为背后的具体设计原因。
AI-generated from reports · Updated 11 hours ago
Report timeline
Follow the reports to see different sides of the story.
- Hacker News · AISelectedUser Discovers Claude Code Reads Raw GitHub Token on Every Startup
Claude Code defaults to executing `gh auth token --hostname github.com` on every startup to read the raw GitHub token. The author discovered this after configuring 1Password to authorize the `gh` command, which triggered frequent pop-up prompts at launch. The author subsequently wrapped the command via Nix to return a dummy token, finding it did not affect the tool's operation, and posted on Hacker News to ask about the design rationale behind this startup behavior.
Story heat trend
Current heat 7·Comparable peak 10（Nov 4 22:00）·Comparable change, last 24 hours–
Trends compare only the same parties observed continuously, so the scope can be narrower than current heat counts. Move the pointer or tap the chart to see hourly heat; use the left and right arrow keys on a keyboard.