Code requests access to folders outside its workspace

Type: Bug

On macOS Sequoia 15.7.7, recent VS Code builds have begun asking the OS for access to other applications' containers (sandboxes). This request seems to consistently happen within approx. 20 min. of starting up the application.

Other events—seemingly isolated—included Code requesting access to my media library, and wanting to browse my mounted network volumes. While I realize this is possibly to do with Electron and/or Chromium, it is new and unwanted behaviour. Please lock down the app's desire to spread its wings. It should only be concerned about accessing where I'm working.

VS Code version: Code 1.128.0 (Universal) (fc3def6774c76082adf699d366f31a557ce5573f, 2026-07-07T15:14:24-07:00)
OS version: Darwin x64 24.6.0
Modes:

System Info

|Item|Value|
|---|---|
|CPUs|Intel(R) Core(TM) i7-8700B CPU @ 3.20GHz (12 x 3200)|
|GPU Status|2d_canvas: enabled
GPU0: VENDOR= 0x8086 [Google Inc. (Intel)], DEVICE=0x3e9b [ANGLE (Intel, ANGLE Metal Renderer: Intel(R) UHD Graphics 630, Version 15.7.7 (Build 24G720))], DRIVER_VENDOR=Intel, DRIVER_VERSION=15.7.7 *ACTIVE*
Machine model name: Macmini
Machine model version: 8.1
direct_rendering_display_compositor: disabled_off_ok
gpu_compositing: enabled
multiple_raster_threads: enabled_on
opengl: enabled_on
rasterization: enabled
raw_draw: disabled_off_ok
skia_graphite: enabled_on
trees_in_viz: disabled_off
video_decode: enabled
video_encode: enabled
webgl: enabled
webgpu: enabled
webnn: disabled_off|
|Load (avg)|4, 5, 6|
|Memory (System)|64.00GB (4.10GB free)|
|Process Argv|--crash-reporter-id 8dc81e7a-27da-41a5-9a61-c6ebceebc46a|
|Screen Reader|no|
|VM|0%|
Extensions (8)

Name|Identifier|Author|Version
---|---|---|---
Increment Selection|albymor.increment-selection|albymor|0.2.0
Python Debugger|ms-python.debugpy|ms-python|2026.6.0
Python|ms-python.python|ms-python|2026.4.0
Pylance|ms-python.vscode-pylance|ms-python|2026.2.1
Python Environments|ms-python.vscode-python-envs|ms-python|1.36.0
Ren'Py Language (Official)|renpy.language-renpy|renpy|805.1.0
SemanticDiff|semanticdiff.semanticdiff|semanticdiff|0.10.0
Code Spell Checker|streetsidesoftware.code-spell-checker|streetsidesoftware|4.5.6

A/B Experiments

```
vsliv368:30146709
vswsl492:30256859
binariesv615:30325510
nativeloc1:31344060
dwcopilot:31170013
dwoutputs:31242946
copilot_t_ci:31333650
e5gg6876:31282496
pythonrdcb7:31342333
6518g693:31463988
aj953862:31281341
82j33506:31327384
6abeh943:31336334
envsactivate1:31538736
478i5457:31544283
cloudbuttont:31379625
3efgi100_wstrepl:31403338
ec5jj548:31422691
cp_cls_t_966_ss:31526232
8hhj4413:31478653
cp_cls_c_1081:31454833
conptydll_true:31498968
e9c30283:31461165
test_treatment2:31471001
46204921:31447328
idci7584:31464702
e3e4d672:31494082
ei9d7968:31496641
chat:31457767
7e187181:31503455
ghj88844:31499326
h08i8180:31475369
23c7c724:31520045
ddid_c:31478207
hmra_i5g22:31518061
ie3bb177:31543534
7df3h592:31512476
cp_cls_t_1082:31535311
logging_enabled_new:31498466
db5d2638:31499441
jb_cp_cls_t_632:31543129
852d2892:31506239
56dj4588:31512888
32d76977:31512328
ha629193:31508444
cdk-lw-on:31524445
f9bf7985:31543584
a1ije391_t:31540920
g4a0e106:31529594
8hfba999:31537718
jbcp_cls_pctr_t:31531130
61138546:31518536
cp_intellij_t_nes:31548657
d7b18187:31526828
h561g132:31533256
sessions_3:31532893
ihg5j128:31534457
f412h606:31546039
9gg7f176:31542112
sandbox-ui-on-2:31543161
nes-nc-ctrl:31546581

```