Security – Codex
Codex can help engineering and security teams assess authorized code, gather evidence, and turn reviewed findings into focused fixes. These use cases cover repository scans, change reviews, dependency incidents, and vulnerability remediation.
Assess a repository
Use the Codex Security plugin to run a higher-recall scan across an authorized repository, review plausible findings, and produce reports that support human triage.
[
Run a deep security scan
Use the Codex Security plugin to run a higher-recall, repository-wide audit that repeats...
Engineering Quality](https://developers.openai.com/codex/use-cases/deep-security-scan)
Review changes before merge
Ask Codex to inspect a pull request, branch, commit, or working-tree diff for security regressions and return evidence tied to the changed code.
[
Scan code changes for security
Use the Codex Security plugin to examine a Git-backed change set, validate plausible...
Engineering Quality](https://developers.openai.com/codex/use-cases/scan-code-changes-for-security)
Audit dependency incidents
Turn a public package or supply chain advisory into a read-only repository audit covering manifests, lock files, scripts, workflows, and exposure paths.
[
Audit dependency incidents
Use Codex to turn a public package or supply chain advisory into a read-only audit, then...
Engineering Quality](https://developers.openai.com/codex/use-cases/dependency-incident-audits)
Remediate reviewed findings
Bring Codex an approved finding from a security report, advisory, or ticket, then have it make a minimal fix and verify that the vulnerable behavior no longer reproduces.
[
Remediate a vulnerability backlog
Bring in approved findings from ticketing tools or vulnerability reporting systems, then use...
Engineering Quality](https://developers.openai.com/codex/use-cases/remediate-vulnerability-backlog)