codex-security Codex Plugin
Codex PluginCodexSecuritySecurity, Auth & ComplianceCode Quality, Review & TestingThe explanation below is AI-generated. Please verify it against the sources.
Codex Security is an OpenAI-published Codex plugin that bundles workflows for scanning, analyzing, and investigating security issues in code and diffs. It runs inside Codex through the desktop app, CLI, or cloud, and surfaces a Security workbench for tracking scans, findings, and repositories. According to the official documentation, typical uses include scanning a whole repository or a single folder, running deeper scans, reviewing pull-request or branch diffs, triaging a backlog of existing findings, and drafting fixes or hardening proposals. A companion Codex Security Cloud plugin, plus a CLI and TypeScript SDK, extend this scanning to connected GitHub repositories and CI pipelines. The plugin manifest lists it under the Security category with interactive read and write capabilities.
About the service
Codex Security can connect to external code-hosting services rather than working purely on local files: the separate Codex Security Cloud plugin links to GitHub repositories for one-time or continuous scanning, and the CLI documentation describes running scans inside GitLab CI/CD pipelines. This lets scan results, findings, and repository monitoring be tied to those external platforms instead of staying confined to a single local session.
What you can do with codex-security
- Run a security scan against a full repository or a chosen folder
- Run a deeper scan when broader coverage is needed and more time is available
- Review code changes in a pull request, commit, branch diff, or working-tree patch before merging
- Triage a backlog of existing security findings
- Apply bounded fixes to approved findings and verify them
- Export findings as artifacts or send them to approval-gated tracking destinations
- Draft vulnerability reports from findings, disclosure notes, and proof-of-concept material
- Propose security hardening based on scan results or other evidence
- Use the CLI or TypeScript SDK for bulk scans, CI checks, or custom tooling integrations
- Connect GitHub repositories through Codex Security Cloud for one-time or continuous scanning
Sources
History of codex-security
- Codex Plugin Updated plugin manifest (plugin.json) of codex-security
- Codex Plugin Updated version of codex-security (0.1.24 → 0.1.32)
- Codex Plugin Updated plugin manifest (plugin.json) of codex-security
- Codex Plugin Updated version of codex-security (0.1.22 → 0.1.24)
- Codex Plugin Updated plugin manifest (plugin.json) of codex-security
- Codex Plugin Updated version of codex-security (0.1.11 → 0.1.22)