Security
For the complete documentation index, see llms.txt. Markdown versions of documentation pages are available by appending
.mdto the page URL.
Assess code, review changes, and remediate security findings.
Codex can help engineering and security teams assess authorized code, gather evidence, and turn reviewed findings into focused fixes. These use cases cover repository scans, change reviews, dependency incidents, and vulnerability remediation.
Assess a repository
Use the Codex Security plugin to run a comprehensive scan across an authorized repository, review plausible findings, and produce reports that support human triage. Comprehensive scans take longer because they repeat discovery across independent workers.
- Run a deep security scan: Use the Codex Security plugin to run a more comprehensive audit of a repository or scoped...
Review changes before merge
Ask Codex to inspect a pull request, branch, commit, or working-tree diff for security regressions and return evidence tied to the changed code.
- Scan code changes for security: Use the Codex Security plugin to examine a Git-backed change set, validate plausible...
Audit dependency incidents
Turn a public package or supply chain advisory into a read-only repository audit covering manifests, lock files, scripts, workflows, and exposure paths.
- Audit dependency incidents: Use Codex to turn a public package or supply chain advisory into a read-only audit, then...
Remediate reviewed findings
Bring Codex an approved finding from a security report, advisory, or ticket, then have it make a minimal fix and verify that the vulnerable behavior no longer reproduces.
- Remediate a vulnerability backlog: Bring in approved findings from ticketing tools or vulnerability reporting systems, then use...