OpenAI Releases Codex Security CLI and TypeScript SDK

X postTiboTool

OpenAI has open-sourced Codex Security, a tool designed to discover, validate, and remediate vulnerabilities in codebases. It provides a CLI, a TypeScript SDK, and support for multiple model providers.

Key points

  1. Open-source release under the Apache-2.0 licence for detecting, validating, and fixing code security vulnerabilities.
  2. Available as a CLI utility and TypeScript SDK (`@openai/codex-security`), requiring Node.js 22.13.0+ and Python 3.10+.
  3. Supports CI integration via environment variables such as OPENAI_API_KEY, alongside containerised workflows using Docker Compose.
  4. Includes a preview findings service with SQLite storage, embedding-based deduplication, and a real-time dashboard.
  5. Works with third-party inference providers including Amazon Bedrock, OpenRouter, and Fireworks.

Why it matters

Embedding automated security validation into standard developer tooling and CI workflows streamlines AppSec audits and reduces manual review overhead across code repositories.

Analysis

Codex Security couples repository scanning and model-driven code remediation with local state management and deduplication. Rather than locking developers into OpenAI APIs, the framework explicitly supports external inference routes such as Amazon Bedrock or OpenRouter. The ability to evaluate findings against custom markdown policy rubrics also simplifies the integration into bespoke enterprise triage pipelines.

Original post

Tibo

@thsottiaux · 29 July 2026

More opensource goodness. We have just released a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan repositories, review changes, track findings over time, and run security checks in CI. t.co/nkfTbw8p7b

8.3k likes399 replies5.6k bookmarks736.6k views

View on X

Mentioned links

Links and tools from this entry

Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.

Related entries

Similar in content, found by the AI search.

  • X post:Mario Zechner

    OpenAI Releases Codex Security CLI and TypeScript SDK

    Mario Zechner highlighted the open-source repository openai/codex-security, a CLI and TypeScript SDK developed by OpenAI to detect, validate, and remediate security vulnerabilities in codebases.

    94bookmarks10.6kviews

    AI & LLMs· Tool

  • Repository:bex-co/bex-security

    Bex Security: Agent-Agnostic AI Security Scanner

    Bex Security is an open-source, upstream-first fork of OpenAI Codex Security that brings vulnerability detection, validation, and remediation to multiple coding agents via the Agent Client Protocol (ACP).

    51starsTypeScript

    AI & LLMs· Tool

  • Repository:openai/codex

    OpenAI Codex CLI: Local Terminal Coding Agent Built in Rust

    Codex CLI is an open-source, lightweight coding agent developed by OpenAI that runs locally in your terminal. Written in Rust, it connects directly to ChatGPT plans or standard API keys.

    121.7kstarsRust

    AI & LLMs· Tool

Back to the knowledge base

Let's talk about your project

Get in touch

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.