OpenAI Releases Open-Source Codex Security CLI for Repository Scanning

OpenAI has quietly released Codex Security CLI, an open-source tool and TypeScript SDK designed to scan code repositories for security issues. The tool allows developers to track findings across runs, verify fixes, and integrate security checks directly into CI/CD pipelines. This release marks a significant step for OpenAI into the DevSecOps space, providing developers with automated tools to secure AI-assisted and traditional code. Integrating security scanning directly into CI/CD pipelines helps prevent vulnerabilities from reaching production environments. The tool is currently in an early release stage and can be installed via npm using `@OpenAI/codex-security`. It functions as both a command-line interface (CLI) and a TypeScript SDK, allowing developers to find, validate, and review security issues in code they own.