Skip to content

Codex Security GitHub Action 0.3.0

Choose a tag to compare

View all tags
@mldangelo-oai mldangelo-oai released this 15 Oct 04:19
· 257 commits to main since this release
Immutable release. Only release title and notes can be modified.
action-v0.3.0
3f61e51

Run repository and pull-request security scans in GitHub Actions with Codex Security 0.3.0. Set source scope and time and cost budgets, review job summaries, download results, and upload findings to GitHub code scanning as SARIF. You can also fail a job at a chosen severity.

The initial Action supports GitHub.com, Linux x64 runners, and API-key authentication. See the Action guide for setup and the 0.3.0 release notes for all changes and upgrade guidance.

Pin the verified distribution commit in your workflow:

- uses: openai/codex-security@3f61e5150981a5087c32e4395bbaa8ce5ce0c3e3 # action-v0.3.0

This companion release provides the release manifest and CycloneDX SBOM for the existing action-v0.3.0 distribution. The Action installs @openai/codex-security@0.3.0 from npm with its verified package integrity. The manifest records the source commit (5c5239dd8062a7d00916c4bc0d5aeaa3ed0c5477), distribution commit, dependency-lock hashes, and bundle hashes.

Assets 5
Loading