{"id":22847,"date":"2011-03-10T15:00:20","date_gmt":"2011-03-10T15:00:20","guid":{"rendered":"https:\/\/scannn.com\/openai-codex-security-sdks-and-cli-for-codex-security-%c2%b7-github\/"},"modified":"2011-03-10T15:00:20","modified_gmt":"2011-03-10T15:00:20","slug":"openai-codex-security-sdks-and-cli-for-codex-security-%c2%b7-github","status":"publish","type":"post","link":"https:\/\/scannn.com\/lv\/openai-codex-security-sdks-and-cli-for-codex-security-%c2%b7-github\/","title":{"rendered":"openai\/codex-security: SDKs and CLI for Codex Security \u00b7 GitHub"},"content":{"rendered":"\n
\n

@openai\/codex-security<\/code> is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan repositories, review changes, track findings over time, and run security checks in CI.<\/p>\n

Documentation<\/a><\/strong><\/p>\n

Requires Node.js 22 or later, Python 3.10 or later, and access to Codex Security.<\/p>\n

\n
npm install @openai\/codex-security\nnpx @openai\/codex-security login\nnpx @openai\/codex-security scan .<\/span>\nnpx @openai\/codex-security scan .<\/span> --model gpt-5.6-terra --effort high<\/pre>\n<\/div>\n
For CI, set OPENAI_API_KEY<\/code> instead of signing in.<\/p>\n
If both a ChatGPT sign-in and an API key are available, interactive scans ask
\nwhich credential to use. CI and other noninteractive scans keep the existing
\nAPI-key precedence. Select a credential explicitly when needed:<\/p>\n
\n
npx @openai\/codex-security scan .<\/span> --auth chatgpt\nnpx @openai\/codex-security scan .<\/span> --auth api-key<\/pre>\n<\/div>\n
To make your ChatGPT sign-in the automatic default, unset any configured API
\nkeys:<\/p>\n
\n
unset<\/span> OPENAI_API_KEY CODEX_API_KEY<\/pre>\n<\/div>\n
Scan history is stored in the Codex Security workbench state directory. If that
\ndirectory cannot be written, set CODEX_SECURITY_STATE_DIR<\/code> to a writable
\ndirectory outside the repository.<\/p>\n
\n
import<\/span> {<\/span> CodexSecurity<\/span> }<\/span> from<\/span> \"@openai\/codex-security\"<\/span>;<\/span>\n\nconst<\/span> security<\/span> =<\/span> new<\/span> CodexSecurity<\/span>(<\/span>)<\/span>;<\/span>\nconst<\/span> result<\/span> =<\/span> await<\/span> security<\/span>.<\/span>run<\/span>(<\/span>\".\"<\/span>)<\/span>;<\/span>\n\nconsole<\/span>.<\/span>log<\/span>(<\/span>result<\/span>.<\/span>reportPath<\/span>)<\/span>;<\/span>\nawait<\/span> security<\/span>.<\/span>close<\/span>(<\/span>)<\/span>;<\/span><\/pre>\n<\/div>\n
For installation, authentication, scan options, and CI setup, see the official documentation<\/a>.<\/p>\n<\/div>\n
Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
@openai\/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan repositories, review changes, track findings over time, and run security checks in CI. Documentation Requires Node.js 22 or later, Python 3.10 or later, and access to Codex Security. npm install @openai\/codex-security npx @openai\/codex-security login npx @openai\/codex-security scan […]<\/p>\n","protected":false},"author":16,"featured_media":22848,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[143],"tags":[],"class_list":["post-22847","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai"],"_links":{"self":[{"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/posts\/22847","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/comments?post=22847"}],"version-history":[{"count":0,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/posts\/22847\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/media\/22848"}],"wp:attachment":[{"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/media?parent=22847"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/categories?post=22847"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scannn.com\/lv\/wp-json\/wp\/v2\/tags?post=22847"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}