Codex Security 0.6.0

Highlights

Codex Security 0.6.0 adds vendor report imports, optional owner suggestions, and hosted remediation commands. Severity classification now uses a built-in rubric and three independent reviews by default; review the model-access and cost changes below before upgrading.

• Import vendor findings. Import supported Wiz, Snyk Open Source, Semgrep Code, and Endor Labs reports with publish findings --to local, or publish them with --to cloud. Read local evidence with findings imported. Local imports require no Cloud login or model call and remain separate from assessed scan findings. See the Wiz, Snyk, Semgrep, and Endor format guides.
• Configurable severity reviews. classify-severity uses a bundled rubric when no custom rubric is supplied. --runs N selects 1–10 independent reviews, with three by default. The most common severity wins, with the highest severity breaking ties. (#1765)
• Optional owner suggestions. scan --owner-suggestions writes a separate owner-suggestion report after supported committed Git scans. Suggestions preserve the completed scan and do not assign users. Owner enrichment is skipped when a scan cost limit is set. (#1760)
• Hosted patching and source-only verification. patch --host and verify-fix --host expose the hosted remediation protocol through the CLI. Ordinary patch and verification commands accept --verification-mode static to assess source evidence; omitting it preserves standard verification. Static mode sets the assessment scope and does not enforce a command-execution boundary. See the hosted remediation guide. (#1854)
• Policy previews without Python. Policy diffs now run in Node while preserving diff formatting, cancellation, and source freshness checks. (#1837)

Other improvements

• Patch project-trust overrides are serialized correctly for Codex. (#1861)
• Update Hono and the Linear SDK dependencies. (#1831, #1852)
• Release verification runs test shards in parallel and reports publication progress on the release PR. (#1798)

Upgrade notes

Severity classification requires model access

Classification without --rubric previously inherited the scanner's severity without model work. It now requires Codex authentication and model access, using three model calls per uncached finding by default. Set --runs 1 (SDK: classificationRuns: 1) for a single review. All requested reviews must succeed; failures do not fall back to the scanner's severity or save a partial vote.

Older classification checkpoints without a recorded review count, and former inherited assessments without a rubric hash, are reclassified on the next classification request. Changing the review count or rubric also invalidates matching checkpoints. Existing results remain readable, and publication does not silently classify findings. Use --reprocess when changing only the model or reasoning effort. See the classification guide.

Policy preview interpreter selection is deprecated

securityPolicyDiff(draft, python, signal) retains its call shape, but interpreter strings and paths returned by resolver callbacks no longer select or validate an executable. previewPolicy() no longer resolves Python, and pythonPath and PYTHON do not affect previews. Update integrations that relied on an invalid interpreter failing or a custom executable producing the diff. Explicit resolver callbacks still run for changed drafts and propagate their errors. Omit the second argument in new code, or pass undefined when supplying a cancellation signal. Python-dependent generation and other operations are unchanged.

Import identity and earlier upgrades

Keep a stable source key and acquisition format across vendor imports. Switching formats can create separate records or replace richer evidence with less detail; omitted findings remain stored. Review each provider's format guide before changing inputs.

If upgrading from before 0.5.1, also review the 0.5.1 upgrade notes and their guidance for earlier versions. Use openai/codex-security@action-v0.6.0 for the matching GitHub Action, or pin the distribution commit in its companion release after publication.

All changes

What's Changed

Breaking changes

• fix!: classify severity with a default rubric and configurable reviews by @kmbroai in #1765
• refactor!: compute policy diffs without Python by @mldangelo-oai in #1837

Features

• feat(scan): emit optional owner suggestions after scans by @jameshiester-oai in #1760
• feat: add hosted remediation commands and static verification by @mluck-openai in #1854
• feat(imports): add shared Cloud findings publisher by @mldangelo-oai in #1441
• feat(imports): store external findings locally by @mldangelo-oai in #1847
• feat(imports): add local report import and readback by @mldangelo-oai in #1848
• feat(wiz): import repository vulnerability CSV reports by @mldangelo-oai in #1693
• feat(snyk): import Open Source JSON findings by @mldangelo-oai in #1687
• feat(semgrep): import Code findings by @mldangelo-oai in #1690
• feat(endor): import findings by @mldangelo-oai in #1689
• feat(github): import code scanning alerts and advisories by @mldangelo-oai in #1632

Fixes

• fix(sdk): serialize patch project trust overrides correctly by @mldangelo-oai in #1861

Other changes

• chore(deps): bump hono from 4.13.10 to 4.13.13 in /plugins/codex-security/mcp-app by @dependabot[bot] in #1831
• chore(deps): update @linear/sdk to 97.2.0 by @dependabot[bot] in #1852

Full Changelog: npm-v0.5.1...npm-v0.6.0