Scaled-Tech-Consulting/Gitea-Tools
2
0
Fork 0
Code Issues 6 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

bug: macOS com.apple.provenance blocks Python execution of new files #3

New Issue
Open
opened 2026-06-21 17:16:25 -05:00 by jcwalker3 · 0 comments
jcwalker3 commented 2026-06-21 17:16:25 -05:00
Owner
Copy Link
Copy Source

Files created or restored by the Antigravity terminal get com.apple.provenance extended attribute. macOS (Sequoia+) blocks Python.app from executing files with this attribute.

Affected: Any .py file written by the agent terminal (including create_issue.py which keeps vanishing).
Not affected: Shell scripts (bash ignores provenance), files created before the agent session.

Fix options:

  1. Clear provenance from a Full Disk Access terminal: xattr -cr /Users/jasonwalker/Development/Gitea-Tools/
  2. Grant Full Disk Access to the terminal app in System Settings → Privacy & Security
  3. Run xattr -d com.apple.provenance <file> from Terminal.app (not the IDE terminal)

This is a macOS security feature, not a bug in our code — but we should document the workaround.

Files created or restored by the Antigravity terminal get `com.apple.provenance` extended attribute. macOS (Sequoia+) blocks Python.app from executing files with this attribute. **Affected:** Any `.py` file written by the agent terminal (including `create_issue.py` which keeps vanishing). **Not affected:** Shell scripts (bash ignores provenance), files created before the agent session. **Fix options:** 1. Clear provenance from a Full Disk Access terminal: `xattr -cr /Users/jasonwalker/Development/Gitea-Tools/` 2. Grant Full Disk Access to the terminal app in System Settings → Privacy & Security 3. Run `xattr -d com.apple.provenance <file>` from Terminal.app (not the IDE terminal) This is a macOS security feature, not a bug in our code — but we should document the workaround.
jcwalker3 added the importantbug labels 2026-06-21 17:16:45 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
chore
documentation
Docs / runbooks
 gitea
Gitea MCP workflow
 important
mcp
MCP server / tooling
 mutating
Mutating action; requires gating
 nice-to-have
read-only
Read-only, no mutation
 roadmap
Roadmap / umbrella issue
 security
Security / trust boundary
 status:in-progress
Issue is being worked on
No Label bug important
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jcwalker3 sysadmin
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Scaled-Tech-Consulting/Gitea-Tools#3
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?