OpenAI opens the Codex Security CLI

OpenAI released Codex Security as an Apache 2.0-licensed CLI and TypeScript SDK that can scan repositories, review changes, and track vulnerability findings, but its quick start requires Node.js 22+, Python 3.10+, and access to the service. The packaging brings defensive code review closer to the repository while preserving an access gate behind the open client, a boundary that complements the controls examined in OpenAI’s agent-security firewall strategy. Security teams should treat the CLI as a CI integration surface, not a self-contained scanner: evaluate the hosted dependency and data path before adding it to sensitive pipelines.