OpenAI Open-Sources Codex Security CLI for Finding, Validating, and Fixing Security Vulnerabilities

OpenAI has open-sourced Codex Security, a command-line tool and TypeScript SDK designed to help developers find, validate, and fix security vulnerabilities in their codebases. The release marks a notable step in bringing AI-driven security analysis into everyday development workflows, allowing teams to scan repositories, review pull requests, and embed automated checks directly into CI/CD pipelines. Built on the lightweight Codex coding agent, Codex Security entered research preview in March 2026 and is now available under the Apache-2.0 license, already earning roughly 1.5k stars on GitHub. The tool, published as the npm package @openai/codex-security, uses AI models for contextual analysis rather than relying solely on...

Read the full article at the source.