xcode/entitlements
Checks each entitlement against xcode.allowed_entitlements, when the settings hold that list.
Part of the xcode configuration, at the recommended level. It runs at the commit stage, once per scope. gspot runs this check itself. It skips until you set xcode.allowed_entitlements.
Each entitlement grants the app a system capability, so a new one needs its own review.
What to do
Section titled “What to do”Remove the entitlement, or add it to xcode.allowed_entitlements.
Example
Section titled “Example”An .entitlements key missing from xcode.allowed_entitlements reports a finding. Remove it, or add it to that list.
Turn it off
Section titled “Turn it off”Turn it off for some files, with a reason:
gspot ignore xcode/entitlements --paths "<glob>" --reason "<why>"