codex-security Docker & Self-Hosted Deployment

GitHub

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm:

11,107 stars TypeScript TypeScript 1 file · ~6,758 tokens #ai-security#application-security#cli#code-scanning#codex#codex-security#cybersecurity#devsecops
RAW Compose
1. Pull Image (DOCKERHUB) docker pull library/${CODEX_SECURITY_IMAGE
2. Docker Run (1-Click Launch) docker run -d --name codex-security --restart always ${CODEX_SECURITY_IMAGE:-codex-security:local}
3. Podman Run podman run -d --name codex-security --restart always ${CODEX_SECURITY_IMAGE:-codex-security:local}
4. Skopeo Inspect (Zero-Pull Manifest) skopeo inspect docker://docker.io/library/${CODEX_SECURITY_IMAGE:-codex-security
5. ORAS Pull (OCI Artifact) oras pull ${CODEX_SECURITY_IMAGE:-codex-security:local}
6. Compose Deployment docker compose up -d
compose.yaml
Download .yml 
services:
  codex-security:
    image: ${CODEX_SECURITY_IMAGE:-codex-security:local}
    build:
      context: .
    init: true
    user: ${CODEX_SECURITY_USER:-10001:10001}
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
      - seccomp=${CODEX_SECURITY_SECCOMP:-./docker/codex-security-seccomp.json}
    environment:
      CODEX_API_KEY:
      CODEX_SECURITY_EMBEDDINGS_URL:
      CODEX_SECURITY_GIT_HOST:
      GH_TOKEN:
      GITHUB_TOKEN:
      OPENAI_API_KEY:
    volumes:
      - type: bind
        source: ${CODEX_SECURITY_CSV:-./repositories.csv}
        target: /input/repositories.csv
        read_only: true
        bind:
          create_host_path: false
      - type: bind
        source: ${CODEX_SECURITY_RESULTS:-./results}
        target: /output
        bind:
          create_host_path: false
      - type: bind
        source: ${CODEX_SECURITY_STATE:-./state}
        target: /state
        bind:
          create_host_path: false
    command:
      - bulk-scan
      - /input/repositories.csv
      - --output-dir
      - /output