OpenAI Releases Codex Security CLI and TypeScript SDK
Original: Codex Security
Why This Matters
OpenAI's entry into automated code security tooling signals growing AI-driven DevSecOps adoption.
OpenAI has published 'codex-security' on GitHub, an open-source CLI and TypeScript SDK designed to find, validate, and fix security vulnerabilities in code. It supports CI integration via OPENAI_API_KEY and requires Node.js 22+ and Python 3.10+.
OpenAI has released 'codex-security' (@openai/codex-security), an open-source CLI and TypeScript SDK hosted on GitHub under the Apache-2.0 license. The tool is designed to help developers scan repositories for security vulnerabilities, review code changes, track findings over time, and run automated security checks within CI pipelines. Installation is straightforward via npm: users run 'npm install @openai/codex-security', authenticate with 'npx codex-security login', and initiate scans with 'npx codex-security scan .'. For CI environments, authentication is handled by setting the OPENAI_API_KEY environment variable instead of interactive login. The repository requires Node.js 22 or later and Python 3.10 or later, and access to Codex Security is needed. As of publication, the repository has accumulated 781 stars and 48 forks on GitHub, with 110 commits in the main branch. The project includes a Docker setup and a compose.yaml file for containerized usage.