OpenAI has open-sourced Codex Security CLI under the Apache 2.0 license, making the vulnerability scanning tool freely available on GitHub. The tool automatically finds, verifies, and patches security vulnerabilities across a codebase, supports bulk scanning of multiple repositories, and integrates directly into CI/CD pipelines. Initially previewed in March 2026 for ChatGPT Enterprise, Business, and Edu subscribers, the utility reportedly helped close over 3,000 critical bugs during its preview period. Now in beta, it installs via npm and requires Node.js 22 and Python 3.10 or newer.

Related: OpenAI Launches Codex Security Tool in Research Preview

GitHub: codex-security OpenAI on X