Claude Code has been appending a claude.ai session URL to every commit and PR description by default since v2.1.179
A 270-upvote r/ClaudeAI PSA found that Claude Code adds a `Claude-Session: https://claude.ai/code/session_<id>` git trailer to commits and puts the session URL in PR bodies for web and Remote Control sessions, controlled by `attribution.sessionUrl` (default true) rather than the `attribution.commit` setting people had already turned off. Four separate GitHub issues track it (anthropics/claude-code #41873, #66504, #69614, #76899), the last two asking for it to be opt-in and noting the docs omitted the flag entirely. The thread's own consensus is that the link is not publicly resolvable, so this is a permanent-noise-in-public-git-log problem more than a leak, and the fix is `{"attribution": {"sessionUrl": false}}` in settings.json.
↳ Follow the thread