28## 2. Connect GitHub28## 2. Connect GitHub
29 29
30Confirm that [Codex cloud](https://learn.chatgpt.com/docs/cloud) is set up for your workspace. In the30Confirm that [Codex cloud](https://learn.chatgpt.com/docs/cloud) is set up for your workspace. In the
31plugin, select **New scan**. If prompted, select **Connect GitHub** and grant31plugin, select **Scan**. If prompted, select **Connect GitHub** and grant
32access to the repositories you want to scan.32access to the repositories you want to scan.
33 33
34If a repository is missing, check its GitHub connection and permissions.34If a repository is missing, check its GitHub connection and permissions.
35 35
36## 3. Start a repository scan36## 3. Start a repository scan
37 37
381. In **New scan**, choose the repository.381. In **New Scan**, choose the repository.
392. Select a compatible **Cloud environment**. If none exists, select392. Review the environment. **Auto** creates an environment when you start.
40 **Create environment** to configure one. See [Codex cloud40 Use **Customize** to choose an existing environment. See [Codex cloud
41 environments](https://learn.chatgpt.com/docs/environments/cloud-environment) for setup details.41 environments](https://learn.chatgpt.com/docs/environments/cloud-environment) for setup details.
423. Under **What to scan**, select **Repository**, the default.423. Under **Scan Method**, select **One-Time Scan**.
434. Select **Start scan**.434. Select **Create**.
44 44
45Open the scan in **Scans** to follow its progress and review its findings and45Open the scan in **Scans** to follow its progress and review its findings and
46artifacts.46artifacts.
47 47
48## 4. Review findings and available fixes48## 4. Review findings and available fixes
49 49
50Open **Findings** and select an issue to review its affected code, validation50Open **Findings**. Use **Open findings** to review findings with a **New**,
51evidence, and remediation guidance.51**Triaged**, or **In Progress** status. Search the list or use **Filters** to
52narrow the results. The **Severity and status** chart summarizes the matching
53findings.
54
55<figure className="not-prose my-8">
56 <CodexScreenshot
57 alt="Codex Security Cloud findings filtered to New, Triaged, and In Progress, with a severity and status chart above the findings table"
58 lightSrc={cloudFindings.src}
59 darkSrc={cloudFindings.src}
60 variant="no-wallpaper"
61 maxHeight="560px"
62 imageClass="border border-subtle"
63 panOnMobile
64 />
65 <figcaption className="mt-3 text-sm text-secondary">
66 Filter and review open findings. Repositories, findings, and counts are
67 fictional and match the overview example.
68 </figcaption>
69</figure>
70
71Select an issue to review its affected code, validation evidence, and
72remediation guidance.
52 73
53When a finding offers **Fix with Codex**, select it to generate a proposed74When a finding offers **Fix with Codex**, select it to generate a proposed
54patch. Review the patch before selecting **Create draft pull request**.75patch. Review the patch before selecting **Create draft pull request**.
57 78
58To review changes as new commits arrive:79To review changes as new commits arrive:
59 80
601. Select **New scan**, then choose the repository and Cloud environment.811. Select **Scan**, then choose the repository and review the environment.
612. Under **What to scan**, select **Commit changes**.822. Under **Scan Method**, select **Continuous Scanning**. Codex Security scans
623. Select **Create**.83 the repository's default branch.
843. Choose **Scan commit history from**. Longer windows provide more context,
85 but the initial scan takes longer.
864. Optionally add threat model scoping guidance.
875. Select **Create**.
88
89<figure className="not-prose my-8">
90 <CodexScreenshot
91 alt="New Scan settings with the fictional acme/web-app repository, continuous scanning, the main branch, and one week of commit history"
92 lightSrc={cloudScan.src}
93 darkSrc={cloudScan.src}
94 variant="no-wallpaper"
95 maxHeight="560px"
96 imageClass="border border-subtle"
97 panOnMobile
98 />
99 <figcaption className="mt-3 text-sm text-secondary">
100 Configure continuous scanning. The repository shown is fictional.
101 </figcaption>
102</figure>
63 103
64To adjust monitoring, open **Repositories**, select the repository, and open104To adjust monitoring, open **Repositories**, select the repository, and open
65**Monitoring settings**. You can change the Cloud environment, choose how105**Monitoring settings**. You can change the Cloud environment, choose how
