Scan for vulnerabilities in your code
Developed by OpenAI, codex-security provides a command line interface (CLI) and a software development kit (SDK) designed to find, verify, and remediate security vulnerabilities. Written in TypeScript, this tool aims to automate the process of detecting security flaws in software projects.
Updates
- November 12, 2026: Stars 11,537 → 11,901, latest release npm-v0.10.0 (November 12, 2026).
What you get
- Scan and report vulnerabilities
- Generate patch suggestions
- Record threat models
Installation
npm install --global @openai/codex-security
cs loginRunning it
cs scan .If you don't write code
I want to run a security scan on this project. To do this, can you perform the installation and login using the command-line tool `npm install --global @openai/codex-security` followed by the `cs login` command, and then start the scan with `cs scan .`?
Repository: https://github.com/openai/codex-security. Follow the official instructions in the README of this repository for setup and execution.
Before starting, check which OS we are on and if the necessary tools (e.g., Python, Node.js, Git, Docker) are installed. Install any missing ones step-by-step according to this system.
Create a new, empty folder to work in. Do not touch any files outside this folder and do not delete anything. Tell me what you are going to do in one sentence before running each command.
Tell me what I should see on the screen at the end of each step. If an error occurs, I will paste the error message to you exactly as it is, and we will fix it together.
Related dictionary terms
Links
TreScout did not build this tool · we found it in GitHub trends and wrote it up. This page describes the repository as of 2026-11-11: The star count and our text belong to that day, the repository may have changed since. Check the repository link for the current state. The introductory text was prepared with AI from the repository's own documentation, and this page was machine-translated from the Turkish original · the Turkish version prevails.