Does a secret leave your machine through Claude Code? An end-to-end leak test bench.

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tree: 33f6825e54

main

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '33f6825e54'

${ noResults }

claude-leak-bench/tests

History

Nicolas Massé 3a8281edbe Run Claude Code in a rootless podman sandbox by default Claude Code runs in a pinned, checksum-verified image on an internal network with no egress and a dummy credential. A proxy container is the only way out: it records every request and swaps in the real credential, which never enters the Claude Code container. The host's cached feature flags seed the sandbox config so tools such as Monitor stay available. --sandbox host keeps the previous in-process mode. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		4 weeks ago
..
test_leaks.py	Run Claude Code in a rootless podman sandbox by default	4 weeks ago