OpenAI open-sources Codex Security CLI for repository scans and CI

The package gives approved customers scriptable access to the security scanner OpenAI introduced in March as a GitHub-connected research preview.

By · Published

Primary source: X

Why it matters

OpenAI is placing application-security review inside the local and CI workflows used by coding agents. That gives Codex a route into security budgets while challenging AppSec vendors on validation, remediation and developer distribution.

The individual glowing pixels and phosphor texture of command-line interface text on a display (Macro photograph of a CRT monitor screen's phosphor grid)

Thibault "Tibo" Sottiaux (@thsottiaux), OpenAI's Codex lead, released an open-source command-line interface and TypeScript SDK on July 28th for finding, validating and patching vulnerabilities in software repositories.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.