Codex Security 0.1.18

Highlights

• Attribute API-key scans to the originating end user with the CLI's
  --safety-identifier option or the SDK's safetyIdentifier option. Use a
  stable, privacy-preserving identifier rather than personal data. This
  requires a Codex runtime with native safety identifier support; the bundled
  runtime does not yet support it, so select a compatible build with
  CODEX_CLI_PATH. See
  Safety ID setup and runtime requirements.
• Preserve accepted findings and partial artifacts when Deep Scan fails, is
  canceled, or is interrupted. Recovered results keep their terminal state and
  incomplete coverage explicit rather than appearing complete.

The categorized list below contains the individual changes.

What's Changed

Features

• feat: add safety identifiers to scans by @ianw-oai in #609

Fixes

• fix: preserve Deep Scan findings across terminal failures by @soyeon-oai in #617

Other changes

• ci(release): enforce reviewed conventional release notes by @mldangelo-oai in #616

Full Changelog: npm-v0.1.17...npm-v0.1.18