OpenAI open-sources Codex Security CLI to help developers find and fix vulnerabilities from the command line

OpenAI released Codex Security CLI, an open-source beta command-line tool for finding, verifying, and remediating code vulnerabilities.

The Apache 2.0 tool scans repositories, compares results across runs, supports bulk scans, and integrates with CI/CD workflows.

It was previously known internally as Aardvark and follows an earlier Codex Security research preview.

The CLI installs via npm and requires Node.js 22 and Python 3.10+.