1# Security – Codex1# Security
2
3Assess code, review changes, and remediate security findings.
2 4
3Codex can help engineering and security teams assess authorized code, gather5Codex can help engineering and security teams assess authorized code, gather
4evidence, and turn reviewed findings into focused fixes. These use cases cover6evidence, and turn reviewed findings into focused fixes. These use cases cover
11repository, review plausible findings, and produce reports that support human13repository, review plausible findings, and produce reports that support human
12triage.14triage.
13 15
14[16- https://developers.openai.com/codex/use-cases/deep-security-scan
15
16### Run a deep security scan
17
18Use the Codex Security plugin to run a higher-recall, repository-wide audit that repeats...
19
20Engineering Quality](https://developers.openai.com/codex/use-cases/deep-security-scan)
21 17
22## Review changes before merge18## Review changes before merge
23 19
24Ask Codex to inspect a pull request, branch, commit, or working-tree diff for20Ask Codex to inspect a pull request, branch, commit, or working-tree diff for
25security regressions and return evidence tied to the changed code.21security regressions and return evidence tied to the changed code.
26 22
27[23- https://developers.openai.com/codex/use-cases/scan-code-changes-for-security
28
29### Scan code changes for security
30
31Use the Codex Security plugin to examine a Git-backed change set, validate plausible...
32
33Engineering Quality](https://developers.openai.com/codex/use-cases/scan-code-changes-for-security)
34 24
35## Audit dependency incidents25## Audit dependency incidents
36 26
37Turn a public package or supply chain advisory into a read-only repository27Turn a public package or supply chain advisory into a read-only repository
38audit covering manifests, lock files, scripts, workflows, and exposure paths.28audit covering manifests, lock files, scripts, workflows, and exposure paths.
39 29
40[30- https://developers.openai.com/codex/use-cases/dependency-incident-audits
41
42### Audit dependency incidents
43
44Use Codex to turn a public package or supply chain advisory into a read-only audit, then...
45
46Engineering Quality](https://developers.openai.com/codex/use-cases/dependency-incident-audits)
47 31
48## Remediate reviewed findings32## Remediate reviewed findings
49 33
51then have it make a minimal fix and verify that the vulnerable behavior no35then have it make a minimal fix and verify that the vulnerable behavior no
52longer reproduces.36longer reproduces.
53 37
54[38- https://developers.openai.com/codex/use-cases/remediate-vulnerability-backlog
55
56### Remediate a vulnerability backlog
57
58Bring in approved findings from ticketing tools or vulnerability reporting systems, then use...
59
60Engineering Quality](https://developers.openai.com/codex/use-cases/remediate-vulnerability-backlog)
61
