Just encountered this: Claude Code DOES read all your secret, *.env, etc files by default, even if it's in  the .gitignore

You can add deny read rules (~/.claude/settings.json):

  "permissions": {
    "deny": [
      "Read(**/*.env*)",
      "Read(**/*.pem)",
      "Read(**/*.key)",
      "Read(**/secrets/**)",
      "Read(**/credentials/**)",
      "Read(**/.aws/**)",
      "Read(**/.ssh/**)",
      "Read(**/docker-compose*.yml)",
      "Read(**/config/database.yml)"
    ]
  }

• building @bankr
• founder @payflow 
• made in /crimea 🇺🇦

Wow, that's super helpful to know how to protect sensitive files from Claude, thanks for sharing these deny read rules