openai/codex-security
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security observed · 2026-08-28
Health v2 · maintenance only
80/100
- Activity 99
- Release rhythm 99
- Longevity 3
Flags: young
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 0.0
- age_days: 51
- days_rel: 8
- days_push: 7
- n_releases_24m: 21
Adoption not part of the score
10202 stars · 730 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
OpenAI's Codex Security is a CLI and TypeScript SDK that uses AI to find, validate, and fix security vulnerabilities in codebases. It supports multiple inference providers (OpenAI, Amazon Bedrock, OpenRouter, Fireworks) and containerized bulk scans of many repositories.
Use cases
- scan a codebase for security vulnerabilities
- find and fix security issues in my code with AI
- run automated security scans in CI
- bulk scan many repositories for vulnerabilities
- integrate AI-powered security scanning into a Node.js app
- use a non-OpenAI LLM provider for security scanning
When to choose
- you want AI-driven discovery, validation, and fixing of vulnerabilities beyond static rule-based scanners
- you need a CLI for local or CI security scans with an npm SDK for programmatic use
- you want to scan many repos at scale via Docker Compose
- you want flexibility to swap LLM providers (Bedrock, OpenRouter, Fireworks)
When to avoid
- you need fully offline scanning without any LLM API access or API keys
- you only need lightweight traditional SAST/dependency auditing without AI inference costs
- your environment cannot run Node.js 22.13+ and Python 3.10+
- you require fully deterministic, auditable scanning results without model-driven variability
Facets
cli-tool · maturity active
vulnerability-scanning security cli sdk agent-framework security developer-tools artificial-intelligence cli cross-platform ai-security code-scanning devsecops application-security typescript-sdk openai cybersecurity command-line nodejs docker
10 sources
- readme: https://github.com/openai/codex-security · fetched 2026-08-28 · 7de8e0d9efe6
- homepage: https://developers.openai.com/codex/security · fetched 2026-08-29 · 2799b9a584b9
- site_page: https://learn.chatgpt.com/api/docs · fetched 2026-08-29 · 7c75d2c4ef28
- site_page: https://learn.chatgpt.com/docs · fetched 2026-08-29 · e43ed4c75a43
- site_page: https://learn.chatgpt.com/codex/features · fetched 2026-08-29 · 9b0e57b4407c
- site_page: https://learn.chatgpt.com/api/docs/quickstart · fetched 2026-08-29 · 8f592486a220
- site_page: https://learn.chatgpt.com/api/docs/guides/latest-model · fetched 2026-08-29 · 019d1289b7da
- site_page: https://learn.chatgpt.com/api/docs/concepts · fetched 2026-08-29 · ccdddf3fa247
- site_page: https://learn.chatgpt.com/codex · fetched 2026-08-29 · 54ab8ad10fb3
- site_page: https://learn.chatgpt.com/learn · fetched 2026-08-29 · caed4ecaebe4
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| openai/codex-security | main | 80 |
For agents
markdown · JSON · MCP: product_card(name="openai/codex-security")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem