GoKawiilCodex Security
@openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan repositories, review changes, track findings over time, and run security checks in CI.
Documentation
Quick start
Requires Node.js 22 or later, Python 3.10 or later, and access to Codex Security.
npm install @openai/codex-security npx codex-security login npx codex-security scan .
For CI, set OPENAI_API_KEY instead of signing in.
If both a ChatGPT sign-in and an API key are available, interactive scans ask which credential to use. CI and other noninteractive scans keep the existing API-key precedence. Select a credential explicitly when needed:
npx codex-security scan . --auth chatgpt npx codex-security scan . --auth api-key
To make your ChatGPT sign-in the automatic default, unset any configured API keys:
... continue reading