You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Codex stopped working with github actions openai/codex-action@v1 #9269
What terminal emulator and version are you using (if applicable)?
No response
What issue are you seeing?
Yesterday our github actions codex script worked fine. It used version 0.80.0 . Today it's taking new version of 0.84.0 which make Landlock failure.
Action:
jobs:
codex:
runs-on: ubuntu-latest
permissions:
contents: read
outputs:
final_message: ${{ steps.run_codex.outputs['final-message'] }}
steps:
...
- name: Run Codex
id: run_codex
uses: openai/codex-action@v1
with:
openai-api-key: ${{ secrets.OPENAI_API_KEY }}
prompt: |
This is PR #${{ github.event.pull_request.number }} for ${{ github.repository }}.
Base SHA: ${{ github.event.pull_request.base.sha }}
Head SHA: ${{ github.event.pull_request.head.sha }}
Review ONLY the changes introduced by the PR.
Suggest any improvements, potential bugs, or issues.
Be concise and specific in your feedback.
Pull request title and body:
----
${{ github.event.pull_request.title }}
${{ github.event.pull_request.body }}
Error log:
thinking
**Reviewing code changes between SHAs**
2026-01-15T09:31:16.934869Z ERROR codex_core::codex: needs_follow_up: true
exec
/bin/bash -lc 'git diff --stat 4f6af8e90f6d7a6e2269b40f5d13518b050bd72b 44c207e5d208a014711742250deee789d3d80814' in /home/runner/work/api/api exited 101 in 3ms:
thread 'main' panicked at linux-sandbox/src/linux_run_main.rs:30:9:
error running landlock: Io(Os { code: 13, kind: PermissionDenied, message: "Permission denied" })
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
What steps can reproduce the bug?
Create github action from openai/codex-action@v1 codex readme and it should fail when using 0.84.0 version.
thread 'main' panicked at linux-sandbox/src/linux_run_main.rs:30:9:
error running landlock: Io(Os { code: 13, kind: PermissionDenied, message: "Permission denied" })
note: run with RUST_BACKTRACE=1 environment variable to display a backtrace
exec
/bin/bash -c 'ls /' in /home/vsts/work/1/s2026-01-15T13:52:56.324720Z ERROR codex_core::codex: needs_follow_up: true
exited 101 in 4ms:
thread 'main' panicked at linux-sandbox/src/linux_run_main.rs:30:9:
error running landlock: Io(Os { code: 13, kind: PermissionDenied, message: "Permission denied" })
note: run with RUST_BACKTRACE=1 environment variable to display a backtrace
codex
Blocked by sandbox: every shell command (pwd, ls, even true) fails with landlock Permission denied before execution, so I can’t read the repo or create the required pytest file. No files were changed. Please re-run in an environment where shell access works, and I’ll add the LIVE-CP-05 integration test with the specified markers/spec/docstring.
2026-01-15T13:53:27.938140Z ERROR codex_core::codex: needs_follow_up: false
tokens used
29,602
echo '[INFO] Codex Generate Exit-Code: 0'
echo '[DBG] ls -R tst/core/plugins/supervisor'
[INFO] Codex Generate Exit-Code: 0
[DBG] ls -R tst/core/plugins/supervisor
thread 'main' panicked at linux-sandbox/src/linux_run_main.rs:30:9: error running landlock: Io(Os { code: 13, kind: PermissionDenied, message: "Permission denied" }) note: run with RUST_BACKTRACE=1 environment variable to display a backtrace exec /bin/bash -c 'ls /' in /home/vsts/work/1/s2026-01-15T13:52:56.324720Z ERROR codex_core::codex: needs_follow_up: true exited 101 in 4ms:
thread 'main' panicked at linux-sandbox/src/linux_run_main.rs:30:9: error running landlock: Io(Os { code: 13, kind: PermissionDenied, message: "Permission denied" }) note: run with RUST_BACKTRACE=1 environment variable to display a backtrace codex Blocked by sandbox: every shell command (pwd, ls, even true) fails with landlock Permission denied before execution, so I can’t read the repo or create the required pytest file. No files were changed. Please re-run in an environment where shell access works, and I’ll add the LIVE-CP-05 integration test with the specified markers/spec/docstring. 2026-01-15T13:53:27.938140Z ERROR codex_core::codex: needs_follow_up: false tokens used 29,602
echo '[INFO] Codex Generate Exit-Code: 0'
echo '[DBG] ls -R tst/core/plugins/supervisor'
[INFO] Codex Generate Exit-Code: 0
[DBG] ls -R tst/core/plugins/supervisor
Quick solution for this one is to set previous version:
Activity
Binary-Refinery commentedon Jan 15, 2026
i got the same error today:
thread 'main' panicked at linux-sandbox/src/linux_run_main.rs:30:9:
error running landlock: Io(Os { code: 13, kind: PermissionDenied, message: "Permission denied" })
note: run with
RUST_BACKTRACE=1environment variable to display a backtraceexec
/bin/bash -c 'ls /' in /home/vsts/work/1/s2026-01-15T13:52:56.324720Z ERROR codex_core::codex: needs_follow_up: true
exited 101 in 4ms:
thread 'main' panicked at linux-sandbox/src/linux_run_main.rs:30:9:
error running landlock: Io(Os { code: 13, kind: PermissionDenied, message: "Permission denied" })
note: run with
RUST_BACKTRACE=1environment variable to display a backtracecodex
Blocked by sandbox: every shell command (
pwd,ls, eventrue) fails with landlock Permission denied before execution, so I can’t read the repo or create the required pytest file. No files were changed. Please re-run in an environment where shell access works, and I’ll add the LIVE-CP-05 integration test with the specified markers/spec/docstring.2026-01-15T13:53:27.938140Z ERROR codex_core::codex: needs_follow_up: false
tokens used
29,602
[INFO] Codex Generate Exit-Code: 0
[DBG] ls -R tst/core/plugins/supervisor
novakDev commentedon Jan 15, 2026
Quick solution for this one is to set previous version:
Binary-Refinery commentedon Jan 15, 2026
Do you know what exactly the reason behind it is?
etraut-openai commentedon Jan 15, 2026
This should be addressed in 0.85, which has been published. If you're still seeing problems, let us know.
novakDev commentedon Jan 16, 2026
Everything works fine with version
0.86.0. Thanks for the quick fix.ci(codex-review): pin codex-action to v1.11 and cap review job runtime (