Ecosystem
Codex Security's GitHub Action opens scans to Bedrock, OpenRouter and Fireworks
Source-backed 4 sources
C
Codex Security
Tool Oct 20, 2026
OpenAI's repository security workflows, CLI, TypeScript SDK and GitHub Action for investigating findings and reviewing fixes with supported model providers.
Visit primary link
2 sources attached
What happened lately
Codex Security timeline
Codex Security provides repository scans, finding validation, patch generation and fix verification through Codex workflows, a CLI, a TypeScript SDK and a GitHub Action. These are security analysis workflows around supported models, not a new model or a guarantee that a repository has no vulnerabilities.
The Action’s 0.5.0 distribution installs the matching CLI package and adds Amazon Bedrock, OpenRouter and Fireworks alongside the default OpenAI provider. Users supply model access and credentials. Its documented runner is GitHub-hosted Ubuntu 24.04 x64 with Bubblewrap and AppArmor setup. GitHub Enterprise Cloud on *.ghe.com is supported; Enterprise Server is not.
The standalone CLI installation uses npm install --global @openai/codex-security. The versioned README requires supported Node.js versions and Python 3.10 or newer. Action installation and authentication follow the separate CI setup guide; an interactive Codex subscription is not the Action’s API credential.