Prevent sensitive file lookups in Claude Code

Nearly all projects have sensitive credentials that need to stay secret. With AI-assisted development, you don't want to accidentally expose API keys, database passwords, or encryption secrets to external services, like the LLM model.

Claude Code includes a permission system that lets you deny access to specific files or folders.

Say we have a .env file in our project root containing secrets like Laravel's APP_KEY, which is used for securely hashing encrypted values. If we ask Claude Code to output its contents:

Output the `APP_KEY` within my .env file

By default, it will h...