Codex Security puts vulnerability scanning, patch generation and fix verification in one workflow, callable from the command line and CI
OpenAI's Codex Security lets developers find, investigate and fix code vulnerabilities in one workflow, started from a Codex session or automated with the @openai/codex-security command line or TypeScript SDK. Scans cover whole repositories, selected paths and Git changes, and a deep scan repeats a standard scan and returns deduplicated findings. A completed scan saves a report and findings, and the report lists source evidence and exclusions for judging coverage.