openai/codex-security
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
Codex Security helps you find, investigate, and fix vulnerabilities in your code. Use its security workflows in Codex, or automate them with the @openai/codex-security CLI and TypeScript SDK. GitHub Action. your own rubric, and suggest owners from source and Git history. containers. Open your repository in a Codex session with the Codex Security plugin enabled, then ask: A completed scan saves a report and findings. Read the report for source evidence and exclusions, then request a patch or ask Codex to verify an existing fix. See the agent workflow guide for setup, task selection, and recovery. Requires Node.js 22.13.0+ within 22.x, or Node.js 24.x or 26.x, and Python 3.10+. Python 3.10 also requires tomli. Install the CLI globally and sign in: Run your first scan from the repository directory: When the scan completes, open the Markdown file at the REPORT path in the terminal. Run cs scans show from the…
Read the full README ↗ · Preview checked 2026-11-11T15:12:47.829Z
Inside the original README — Document outline
- Codex Security
- Features
- Use in Codex
- Quick start
- Scan options
- TypeScript SDK
- Read existing Cloud findings
- Generate SECURITY.md
- Save and export threat models
- GitHub Actions
- Containerized bulk scans
- Findings storage and deduplication
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Links from the README
References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.
Documentation belongs to its respective authors. Reported project/model license: Apache-2.0. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
Repository facts
- Owner
- openai
- Primary language
- TypeScript
- Stars
- 13,409
- Forks
- 1,040
- Open issues + pull requests
- 145
- License
- Apache-2.0
- Archived
- No
- Default branch
- main
- Created
- 2026-07-13T22:00:13.000Z
- Last push
- 2026-11-11T10:49:05.000Z
Topics and intended use
Owner-supplied topics: ai-security, application-security, cli, code-scanning, codex, codex-security, cybersecurity, devsecops, nodejs, npm, openai, sdk, security, typescript, vulnerability-scanning
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-11-14T12:21:54.654Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.