Skip to content

1.4.5 — Security hardening

Latest
Latest

Choose a tag to compare

View all tags
@woosungchoi woosungchoi released this 08 Oct 08:11
v1.4.5
6f36f2e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security patch release addressing seven follow-up findings.

Fixes

  • Filter Codex child environments across SDK, direct app-server, accounts and workers so unrelated service credentials are not inherited.
  • Enforce private-chat backup-administrator authorization before full-backup creation and again before delivery, including old tool callbacks.
  • Anchor cleanup operations to no-follow directory descriptors and planned file identities; write handoffs exclusively in private storage with non-overwriting creation.
  • Replace downloaded CLI shell installers with independently approved version/platform/SHA-256 artifact verification and bounded safe extraction.
  • Separate PR review and dependency execution from privileged publication runners. Pin Actions, use trusted helpers, and validate bounded data artifacts.

Upgrade notes

  • CLI updates require CODEX_UPDATE_TRUST_FILE with independently reviewed artifact metadata. Missing trust disables the bot's CLI updater; an existing installed CLI continues to run.
  • Regenerate cleanup previews made before this release. Cleanup mutations require Linux procfs and reject cross-filesystem quarantine moves.
  • Handoffs now use CODEX_HANDOFF_DIR, rather than repository-relative docs paths.
  • Environment filtering is not same-UID filesystem isolation. See security boundaries.

Validation

Public verification: 1,037 passed, one existing skip; 50 added regression tests preserved the previous suite. Dependency audit: zero vulnerabilities. Security patch and release changes passed the required GitHub checks before normal PR merge. This release does not imply a new scanner run.

Security patch: #114

Assets 2
Loading