Live data from Hacker News

Codex Security

github.com

41–50 of 257 posts

Re: Codex Security

#41
Just ran it on a small repo. It ran for almost an hour and then got interrupted. It drained half my weekly usage on a Pro plan.

  npx codex-security scan .
  [00:00] Preparing scan
  [00:00] Authentication: stored Codex credentials.
  [00:03] Preparing scan
  [01:20] Running scan
  [01:20] Preflight: worker delegation supported (up to 8 worker slots).
  [52:47] Running scan
  codex-security: Could not save the Codex Security scan: Repository HEAD changed while the scan was running. Start a new scan.
  codex-security: Partial output was kept at ...

Re: Codex Security

#43
post #38
post #29

Earlier quoted context omitted.

Amazon bedrock is an option for gpt models that does not send your data to openai.

Does Amazon offer better privacy guarantees than OpenAI?

Yes, if only due to the business models being entirely different. AWS sells compute. OpenAI sells models. One of these things benefits from training on your data significantly more than the other.

Re: Codex Security

#44
post #26

How does it work? Does the tool upload code to ChatGPT for analysis? That may not be allowed for some corporate projects.

Yes, I suspect companies that don’t allow ChatGPT will not be able to use the ChatGPT security analysis tool.

Re: Codex Security

#45

Hey HN, Michael here, co-founder of Promptfoo and one of the people working on the Codex Security CLI at OpenAI. Thanks for checking this out and for flagging the auth issues. We just open-sourced it, and there's still plenty for us to improve. Expect the product to evolve quickly. If you try it, I'd really appreciate hearing what works well and what you think we should improve. Happy to answer questions here. CLI do…

[deleted]

Re: Codex Security

#47

security tools from AI companies feel like fire departments run by arsonists. useful, sure, but you can't help noticing who benefits from all the fires

comment feels like someone complaining about being offered a fireproofing solution in the age of flamethrowers.

Re: Codex Security

#48

Hey HN, Michael here, co-founder of Promptfoo and one of the people working on the Codex Security CLI at OpenAI. Thanks for checking this out and for flagging the auth issues. We just open-sourced it, and there's still plenty for us to improve. Expect the product to evolve quickly. If you try it, I'd really appreciate hearing what works well and what you think we should improve. Happy to answer questions here. CLI do…

How does it fare against its own codebase?

Re: Codex Security

#49

Just ran it on a small repo. It ran for almost an hour and then got interrupted. It drained half my weekly usage on a Pro plan. npx codex-security scan . [00:00] Preparing scan [00:00] Authentication: stored Codex credentials. [00:03] Preparing scan [01:20] Running scan [01:20] Preflight: worker delegation supported (up to 8 worker slots). [52:47] Running scan codex-security: Could not save the Codex Security scan: R…

I plan to hack it to use openrouter and Kimi K3 or GLM 5.2 to keep expenses reasonable.

For context can you share the line count?

Post reply on HN