OpenAI open sources the Codex Security CLI to scan repositories and gate CI/CD

The Apache 2.0 CLI and TypeScript SDK let developers find, validate, and fix code vulnerabilities, track findings across runs, and add security checks to pull requests. It shipped early after Hacker News surfaced it first.