OpenAI Open-Sources Codex Security CLI and SDK

More opensource goodness. We have just released a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan repositories, review changes, track findings over time, and run security checks in CI.… Show more

We quietly released the open-source Codex Security CLI, but Hacker News found it before we had a chance to share it here... You can now use it to scan repositories, track findings across runs, verify fixes, and add security checks to CI/CD. This is an early release, and we're… Show more

OpenAI released the open-source Codex Security CLI. Apache-2.0 package, brings repository vulnerability scans into terminals and CI. Scans whole repo or selected changes, validate suspected flaws, generate patches, and preserve findings between runs.… Show more

very very worth your time to look at this code. https://twitter.com/thsottiaux/status/2082241164850364555

More of this please. Not more controls and safeguards. God helps software engineers that help themselves, but only if our software doesn't refuse to help. Good, strong work. https://twitter.com/OpenAI/status/2082263717916586117

@OpenAI @OpenAI I tried it and ran for 10 minutes without providing any feedback, and I ended up with a $65 charge on my API key. This is a terrible tool.