Skip to content

Fixel v1.1.0 — local Codex provider

Choose a tag to compare

View all tags
@AmIrRX0 AmIrRX0 released this 24 Aug 05:08
v1.1.0
aad8bc0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Local Codex support

Fixel can now use an existing ChatGPT-authenticated Codex CLI session for local issue-to-PR runs, without ANTHROPIC_API_KEY:

codex login
export GITHUB_TOKEN="your-minimum-permission-token"
node src/cli.js --repo owner/repo --provider codex --issue 42 --verbose

Security

  • Issue text is sent to Codex through stdin, not shell interpolation.
  • Codex runs ephemerally without user config or exec-policy rules.
  • A granular permission profile allows project writes while explicitly denying Codex, SSH, Git, cloud, Docker, npm, and related credential paths.
  • Agent shell network access is restricted to required GitHub/package domains.
  • GitHub/API/package secrets are excluded from the Codex process environment.

The bundled GitHub Action remains explicitly on Claude and still requires ANTHROPIC_API_KEY; local ChatGPT authentication must not be copied to a hosted runner.

Proof

This release was dogfooded on issue #10: Fixel used Codex to open PR #11 without an Anthropic key. Node.js 20 and 22 CI passed, and the PR was security-reviewed before merge.

Assets 2
Loading