# Codex Security

> OpenAI's security scanning CLI and SDK

Find, validate and fix vulnerabilities with Codex.

- Source: https://github.com/openai/codex-security
- Homepage: https://developers.openai.com/codex/security
- License: Apache-2.0
- Language: TypeScript
- Stars: 10957
- Forks: 836
- Contributors: 61
- Last commit: 2026-10-02
- Latest release: npm-v0.1.30 (2026-09-23)
- Purpose: Security & identity
- Runs on: CLI, Library / SDK
- For: Enterprise

## Worth score: 80/100

How much DigGitHub recommends it, from activity, adoption, docs, license and security signals.

- Popularity: 20/25
- Momentum: 10/20
- Maintenance: 25/25
- Community: 10/15
- Readiness: 15/15

## Alternatives

- [Geth](https://diggithub.com/ethereum/go-ethereum.md): Go implementation of Ethereum
- [Bitcoin Core](https://diggithub.com/bitcoin/bitcoin.md): Reference implementation of Bitcoin
- [Tailscale](https://diggithub.com/tailscale/tailscale.md): Easy WireGuard mesh VPN
- [Better Auth](https://diggithub.com/better-auth/better-auth.md): Comprehensive TypeScript authentication
- [Trivy](https://diggithub.com/aquasecurity/trivy.md): Find vulnerabilities, misconfigurations and secrets
- [acme.sh](https://diggithub.com/acmesh-official/acme.sh.md): Pure shell ACME client for TLS certificates
- [SkillSpector](https://diggithub.com/NVIDIA/SkillSpector.md): Security scanner for agent skills
- [JADX](https://diggithub.com/skylot/jadx.md): Dex to Java decompiler

---

Source page: https://diggithub.com/openai/codex-security
Updated: 2026-10-03