Just getting auth issues so far...

I seem to have gotten a bunch of you are trying to stuff we don't allow errors.. very annoying.

Can they explain what types of projects it works on and how does it check I own it? Like will it just not work on Linux kernel even on my own patches to it?

I wonder if tools like this will put companies like snyk out of business. We use snyk at work and I have not been satisfied.

would love it to see it h2h against https://github.com/usestrix/strix (45k stars)

I don't think there's much to this other than it being a convenient CI wrapper around their existing models?

Edit: there's a little bit more meat here: https://github.com/openai/codex-security/tree/main/sdk/types...

Alibaba just open sourced their version of a CLI code review tool too.

https://github.com/alibaba/open-code-review

Hey HN, Michael here, co-founder of Promptfoo and one of the people working on the Codex Security CLI at OpenAI.

Thanks for checking this out and for flagging the auth issues. We just open-sourced it, and there's still plenty for us to improve. Expect the product to evolve quickly.

If you try it, I'd really appreciate hearing what works well and what you think we should improve. Happy to answer questions here.

CLI docs: https://learn.chatgpt.com/docs/security/cli

I was actually discussing solutions for this with my coworkers—building white-hat security agents. It seems like openai/codex-security could simplify a lot of that, or at least provide a version of Codex that's purpose-built for security workflows. Really exciting news!

Update: As far as I understand, this was already available as a Codex plugin. The main news is that OpenAI has now open-sourced it, and development is still moving quickly.