SpyBara
Go Premium

Documentation 2026-10-16 23:02 UTC to 2026-10-17 23:00 UTC

4 files changed +8 −6. View all changes and history on the product overview
2026
Fri 30 23:59 Thu 29 23:59 Wed 28 23:00 Tue 27 23:58 Mon 26 23:58 Fri 23 23:59 Thu 22 23:57 Tue 20 23:02 Mon 19 23:02 Sat 17 23:00 Fri 16 23:02 Thu 15 23:00 Wed 14 23:59 Tue 13 23:01 Mon 12 23:01 Fri 9 23:02 Thu 8 23:01 Wed 7 23:57 Tue 6 23:02 Mon 5 23:57 Fri 2 23:58 Thu 1 22:59

security/cli.md +2 −1

Details

9 9 

10## Check the prerequisites10## Check the prerequisites

11 11 

12You need Node.js 22 (22.13.0 or later), 24, or 26, plus Python 3.10 or later.12Use Node.js 24 or 26, or Node.js 22 starting with 22.13.0.

13You also need Python 3.10 or later.

13Python 3.10 also needs `tomli`. Scans using OpenAI inference require Codex Security access.14Python 3.10 also needs `tomli`. Scans using OpenAI inference require Codex Security access.

14Depending on your account and repository, full-repository scans may also15Depending on your account and repository, full-repository scans may also

15require [Trusted Access for Cyber](https://chatgpt.com/cyber).16require [Trusted Access for Cyber](https://chatgpt.com/cyber).

Details

30 30 

31The runner needs:31The runner needs:

32 32 

33- Node.js 22 (22.13.0 or later), 24, or 26.33- Node.js 24 or 26, or Node.js 22 starting with 22.13.0.

34- Python 3.10 or later.34- Python 3.10 or later.

35- The published `@openai/codex-security` package, installed outside the35- The published `@openai/codex-security` package, installed outside the

36 repository checkout.36 repository checkout.

Details

1160 1160 

1161For CI, keep the API key scoped to the scan step and use a trusted workflow.1161For CI, keep the API key scoped to the scan step and use a trusted workflow.

1162 1162 

1163The CLI requires Node.js 22 (22.13.0 or later), 24, or 26. Scans, bulk scans,1163The CLI requires Node.js 24 or 26, or Node.js 22 starting with 22.13.0.

1164exports, scan history, and saved findings also require Python 3.10 or later.1164Scans, bulk scans, exports, scan history, and saved findings also require

1165Python 3.10 or later.

1165Python 3.10 also requires `tomli`. Use `--python` with `scan`, `bulk-scan`, or1166Python 3.10 also requires `tomli`. Use `--python` with `scan`, `bulk-scan`, or

1166`export`, or set `PYTHON` for any Python-backed command.1167`export`, or set `PYTHON` for any Python-backed command.

1167 1168 

security/sdk.md +2 −2

Details

7findings, coverage details, and paths to scan artifacts. For longer scans, it7findings, coverage details, and paths to scan artifacts. For longer scans, it

8supports preflight checks, cost limits, progress callbacks, and cancellation.8supports preflight checks, cost limits, progress callbacks, and cancellation.

9 9 

10The SDK uses ECMAScript modules (ESM) and runs server-side with Node.js 2210The SDK uses ECMAScript modules (ESM) and runs server-side with Node.js 24 or 26,

11(22.13.0 or later), 24, or 26. Scanning also requires Python 3.10 or later.11or Node.js 22 starting with 22.13.0. Scanning also requires Python 3.10 or later.

12Python 3.10 also requires the `tomli` package.12Python 3.10 also requires the `tomli` package.

13 13 

14Running scans requires Codex Security access. For general coding agents, see14Running scans requires Codex Security access. For general coding agents, see