Codex Security

	Codex Security(github.com)
	529 points by bakigul 15 hours ago \| 191 comments
	tl;dr: OpenAI has released `@openai/codex-security`, a CLI and TypeScript SDK for scanning repositories to find, validate, and fix security vulnerabilities, with support for tracking findings over time and integrating into CI pipelines. It requires Node.js 22+ and Python 3.10+, and authenticates via either ChatGPT sign-in or an `OPENAI_API_KEY` (the latter taking precedence in non-interactive contexts).
	HN Discussion: ↑OpenAI team member welcomes feedback and acknowledges the tool needs improvement ↓Users report the tool hangs, fails, or drains usage quotas without producing results ↓Skeptical of AI companies selling security tools given their role in creating insecure AI-generated code ↓The tool is just a thin CLI wrapper around a prompt, not particularly novel •Questions the choice of Node/Python over Go or Rust for agent-based tooling