How to configure workspace trust settings in vscode?

Workspace trust in VS Code is a security feature that controls whether a folder can run automated tasks or extensions. To configure it, you can toggle trust via the status bar or Command Palette, choose between "Trusted" and "Restricted Mode", adjust default settings like prompt frequency in Preferences, and manually sync trusted folders across devices by editing settings.json. Always ensure only safe directories are listed when syncing trusted folders.

If you use VS Code regularly, especially for working with folders from external sources, you’ve probably come across the workspace trust prompt. It’s a security feature that lets you control whether a folder can run automated tasks or extensions automatically. Here's how to configure it to suit your needs.

What Is Workspace Trust in VS Code?

When you open a folder, especially one you didn’t create yourself, VS Code may prompt you with a message like “Do you trust this folder?” That’s workspace trust in action. If you don’t trust a folder, certain features like auto-running tasks, extension scripts, or debuggers are disabled by default. This helps prevent potentially harmful code from executing without your permission.

You can toggle trust manually later, or even set up global preferences so you’re not constantly prompted — depending on how much risk you're willing to accept.

How to Toggle Trust for a Specific Folder

Once you're in a folder, toggling trust is straightforward:

• Click the lock icon in the bottom status bar, or
• Open the Command Palette (Ctrl Shift P or Cmd Shift P) and search for "Manage Workspace Trust"

From there, you can switch between:

• Trusted – All features enabled
• Restricted Mode – Limited execution capabilities

This setting is saved per folder, so if you close and reopen the same folder later, VS Code remembers your choice.

Adjusting Default Settings for Workspace Trust

If you want to change how often you're prompted or what happens when a folder isn't trusted, go into VS Code settings:

1. Open Settings (Ctrl , or Cmd ,)
2. Search for "Workspace Trust"
3. Look for these key options:
   • "security.workspace.trust.enabled" – Turns workspace trust on/off completely (not recommended unless you know what you're doing)
   • "security.workspace.trust.startupPrompt" – Controls when you get the initial prompt (always, once per session, never)

For most people, keeping trust enabled but adjusting the startup prompt frequency makes sense.

Managing Trusted Folders Across Devices

If you use VS Code on multiple machines or sync your settings via the cloud, you might notice that trusted folder settings aren’t synced by default. That means you’ll have to approve trust again on each device.

If you want to keep a list of trusted folders synced, you can manually edit your settings.json file like this:

{
  "security.workspace.trustedFolders": [
    "/Users/yourname/projects/safe-folder",
    "C:\\Users\\yourname\\Documents\\trusted-repos"
  ]
}

Make sure only safe paths are added here, and avoid including anything you wouldn’t feel comfortable running scripts from.

That’s basically all you need to know to manage workspace trust effectively. It’s not overly complicated, but it’s easy to miss some of the finer controls unless you dig into the settings.

The above is the detailed content of How to configure workspace trust settings in vscode?. For more information, please follow other related articles on the PHP Chinese website!