Search results

Windows scan output directories are not ACL-hardened like credential homes

Status: Open.

#201 In openai/codex-security;

· batmnnn opened on Aug 1, 2026

A scan whose target changed mid-run exits 0 and reports nothing in --json, so CI cannot detect that the results are for a stale tree

Status: Open.

#195 In openai/codex-security;

· genforAI opened on Aug 1, 2026

Python 3.10 is documented as supported, but every documented way to supply the interpreter fails; only an undocumented one works

Status: Open.

#194 In openai/codex-security;

· genforAI opened on Aug 1, 2026

test

Status: Open.

#193 In openai/codex-security;

· devin-ai-integration opened on Aug 1, 2026

Windows: valid Git worktree scans fail for non-ASCII target paths

Status: Open.

#192 In openai/codex-security;

· pradigmaz opened on Aug 1, 2026

(0.1.5) scan agent still creates no draft artifacts on GitHub-hosted runners

Status: Open.

#191 In openai/codex-security;

· PV-Bhat opened on Aug 1, 2026

Expose and optionally retain scan rollout sessions for observability and external indexing

Status: Open.

#187 In openai/codex-security;

· kmckiern opened on Jul 31, 2026

Detect and warn from HEAD drifting earlier

Status: Open.

#164 In openai/codex-security;

· atoomic opened on Jul 30, 2026

Cost tracker keeps an unbounded partial JSONL event and repeatedly recopies it

Status: Open.

#138 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Preflight projection can discard the selected profile and active project trust entry

Status: Open.

#137 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

scans match --all builds unbounded quadratic history payloads

Status: Open.

#136 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026

Bulk-scan account selection only lists the first 100 GitHub organizations

Status: Open.

#135 In openai/codex-security;

· GautamSharma99 opened on Jul 30, 2026