略读 预计 1 分钟
OpenAI just open-sourced Codex Security
摘要
OpenAI 开源了 Codex Security，这是一个命令行工具和 TypeScript SDK，用于在代码中查找、验证和修复安全漏洞。它支持扫描仓库、审查变更、跟踪发现，并可在 CI 中运行安全检查。要求 Node.js 22+、Python 3.10+，并需访问 Codex Security 服务。正文提供了快速开始和 SDK 使用的基本说明。
荐读理由
该工具是 OpenAI 官方开源的代码安全扫描 CLI 和 SDK，可直接集成到 CI 或本地扫描流程，但正文仅给出安装要求和基本功能，未提供具体使用示例或架构细节，需进一步查阅文档才能落地。
原文
Codex Security
@openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan repositories, review changes, track findings over time, and run security checks in CI.
Quick start
Requires Node.js 22 or later, Python 3.10 or later, and access to Codex Security.
npm install @openai/codex-security
npx codex-security login
npx codex-security scan .
For CI, set OPENAI_API_KEY instead of signing in.
TypeScript SDK
import { CodexSecurity } from "@openai/codex-security";
const security = new CodexSecurity();
const result = await security.run(".");
console.log(result.reportPath);
await security.close();
For installation, authentication, scan options, and CI setup, see the official documentation.
这条对你有帮助吗？