Skip to content

Codex Security GitHub Action 0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Oct 01:37
· 53 commits to main since this release
Immutable release. Only release title and notes can be modified.
action-v0.5.0
b46717e

GitHub Action for Codex Security 0.5.0. Installs @openai/codex-security@0.5.0.

Highlights

Changes since action-v0.3.0:

  • The provider input now supports Amazon Bedrock (amazon-bedrock), OpenRouter (openrouter), and Fireworks (fireworks). OpenAI remains the default. Other providers require an explicit model and their own credentials. (#1677)

  • The Action supports GitHub Enterprise Cloud on *.ghe.com, including HTTPS and SSH checkouts. GitHub Enterprise Server remains unsupported. (#1713)

  • Artifact uploads now report archive and input-stream failures with the original error and cancel active streams. (#1671)

Use this release

Update the Action reference in your workflow:

- uses: openai/codex-security@b46717e825c91fe01a350f496c3f6e4b6acfa457 # action-v0.5.0

For a new workflow, follow the setup guide and examples, including the Linux x64 runner, sandbox, and authentication setup.

Upgrade notes

  • Deep Scan continues to use the Action's max-time-hours input. The CLI's new --max-time option uses minutes; it is not an Action input.

  • Upgrading from action-v0.3.0 also includes the 0.4.0 CLI changes. Review those notes and the 0.5.0 upgrade guidance if you maintain custom CLI or plugin workflows.

Release assets

Assets 5
Loading