OpenAI Launches Codex Security Tool to Detect and Fix Code Vulnerabilities with CI Integration
Summary
OpenAI launches Codex Security, a powerful CLI and TypeScript SDK tool that automatically detects, validates, and fixes code vulnerabilities with seamless CI integration for developers.
Key Points
- OpenAI releases Codex Security, a CLI and TypeScript SDK designed to find, validate, and fix security vulnerabilities in code repositories with support for CI integration.
- The tool requires Node.js 22 or later and Python 3.10 or later, and supports authentication via ChatGPT sign-in or an API key, giving developers flexible credential options for both interactive and automated scans.
- Codex Security stores scan history in a workbench state directory and provides a TypeScript SDK for programmatic use, allowing developers to run security scans, track findings over time, and review code changes directly in their workflows.