Codex Security Files

Highlights

• Request an advisory assessment of a completed patch with patch --assess-patch-risk. Add --create-pr to include its concise summary in the draft pull request. The assessment is opt-in and does not approve or merge changes. See patching and risk assessment.
• Import GitHub code scanning alerts through the CLI or SDK for validation against a local checkout. Imports are read-only and preserve the upstream alert context. See GitHub alert imports.
• Publish findings from CSV with publish scan --to cloud --csv PATH, or preview the upload without signing in or sending data with --dry-run. See Cloud publication.
• Improve repeated-scan credential handling on Windows, sign-in recovery messages, cleanup after interrupted publication, and refreshes of changed bundled plugins.

Upgrade notes

• Finish operations using older versions before upgrading; credential-home locks now follow the owning process's lifetime. See authentication.
• The bundled Codex runtime and SDK are now 0.149.1. Custom executables selected with CODEX_CLI_PATH need thread-source attribution support for both exec and app-server (Codex 0.149.1+). See runtime configuration.
• Existing Windows state with invalid ancestor permissions is not repaired automatically. Keep the old reports and select a new private state directory as described in scan history and recovery.

The categorized list below contains the individual changes.

What's Changed

Features

• feat(publish): upload findings from CSV by @kmbroai in https://github.com/openai/codex-security/pull/645
• feat(typescript): attribute Codex Security workloads by @kmbroai in https://github.com/openai/codex-security/pull/644
• feat(typescript): import GitHub code scanning alerts by @kmbroai in https://github.com/openai/codex-security/pull/646
• feat(plugin): add patch-risk assessment by @mldangelo-oai in https://github.com/openai/codex-security/pull/654
• feat(cli): assess patch risk on request by @soyeon-oai in https://github.com/openai/codex-security/pull/664

Fixes

• fix(plugin): refresh changed bundled plugin contents by @mldangelo-oai in https://github.com/openai/codex-security/pull/527
• fix(release): harden release workflow validation by @mldangelo-oai in https://github.com/openai/codex-security/pull/622
• fix: terminate signal-owned publication process trees by @mldangelo-oai in https://github.com/openai/codex-security/pull/625
• fix: explain scan sign-in refresh failures by @mldangelo-oai in https://github.com/openai/codex-security/pull/571
• fix(runtime): use process-owned credential-home locks by @mldangelo-oai in https://github.com/openai/codex-security/pull/613
• fix(windows): stabilize credential inspection and test subprocesses by @mldangelo-oai in https://github.com/openai/codex-security/pull/662
• fix(windows): keep credential state reusable across scans by @faizan-oai in https://github.com/openai/codex-security/pull/635
• fix(package): preserve bundled MCP launcher permissions by @soyeon-oai in https://github.com/openai/codex-security/pull/678

Documentation

• docs(examples): add overview and clarify npm packaging by @kmbroai in https://github.com/openai/codex-security/pull/648
• docs(examples): add findings CSV validation guidance by @mldangelo-oai in https://github.com/openai/codex-security/pull/649
• docs(sdk): simplify the TypeScript README by @mldangelo-oai in https://github.com/openai/codex-security/pull/659

Other changes

• ci: use formatter-only checks for Markdown changes by @mldangelo-oai in https://github.com/openai/codex-security/pull/650

Full Changelog: https://github.com/openai/codex-security/compare/npm-v0.1.20...npm-v0.1.21