OpenAI Open-Sources Codex Security CLI and SDK
CLI and SDK scan repositories for vulnerabilities, validate fixes, and add checks to CI pipelines.
OpenAI open-sourced the Codex Security CLI and accompanying TypeScript SDK. The tools scan entire repositories or selected changes for security issues, validate suspected flaws, generate patches, and preserve findings across runs. They support terminal use and integration into CI/CD workflows to enforce security checks. Released quietly on GitHub and npm under an Apache-2.0 license, the package is described as an early release. OpenAI stated it is collecting feedback to guide further development.
Combined views
Reactions
9 postsTI 
Tibo@thsottiauxMore opensource goodness. We have just released a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan repositories, review changes, track findings over time, and run security checks in CI.
- likes: 7.8K
- replies: 391
- bookmarks: 5.2K
- reposts: 620
PJ Peter J. Liu@peterjliu@thsottiaux Why isn't this just built-in to codex?
- likes: 12
- replies: 1
- bookmarks: 0
- reposts: 0
OP OpenAI@OpenAIWe quietly released the open-source Codex Security CLI, but Hacker News found it before we had a chance to share it here... You can now use it to scan repositories, track findings across runs, verify fixes, and add security checks to CI/CD. This is an early release, and we're…
- likes: 12.4K
- replies: 425
- bookmarks: 6K
- reposts: 1.1K
OP OpenAI@OpenAIInstall the open-source Codex Security CLI,: npm install @OpenAI/codex-security Or start with: npx @OpenAI/codex-security@latest --help NPM: http://npmjs.com/package/@openai/codex-security
- likes: 510
- replies: 22
- bookmarks: 267
- reposts: 41
OP OpenAI@OpenAISource + docs: http://github.com/openai/codex-security
- likes: 465
- replies: 18
- bookmarks: 288
- reposts: 40
RP Rohan Paul@rohanpaul_aiOpenAI released the open-source Codex Security CLI. Apache-2.0 package, brings repository vulnerability scans into terminals and CI. Scans whole repo or selected changes, validate suspected flaws, generate patches, and preserve findings between runs.
- likes: 15
- replies: 3
- bookmarks: 8
- reposts: 5