OpenAI Open-Sources Codex Security CLI for Code Scanning and CI/CD Integration
OpenAI has released Codex Security CLI, an open-source command-line tool and TypeScript SDK designed to scan code repositories, track vulnerabilities, and automate security checks. This release marks OpenAI's expansion into the DevSecOps space, providing developers with automated tools to detect and verify security issues directly within their development workflows and CI/CD pipelines. The tool requires Node.js 22 or higher and Python 3.10 or higher. It supports authentication via ChatGPT accounts or API keys, enabling seamless integration into non-interactive CI environments.
## BACKGROUND
OpenAI Codex is an AI agent designed to assist with software engineering tasks such as writing code and fixing bugs. Codex Security CLI builds on this ecosystem to help developers identify and validate security vulnerabilities in their codebases.