OpenAI releases Codex Security CLI and TypeScript SDK for scanning and fixing code vulnerabilities

OpenAI’s public codex-security repository describes a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in code. The tool supports repository scans, change reviews, finding history, and CI checks, with authentication through ChatGPT sign-in or API keys.

This points to security analysis becoming a more integrated part of AI-assisted development workflows rather than a separate audit step. By packaging checks for local use and CI, OpenAI is positioning agentic coding tools to help teams catch vulnerabilities earlier in the software lifecycle.