OpenAI 刚开源了一个实用的安全扫描工具,能直接用 Codex 模型扫描你仓库里的代码漏洞,还能集成到 CI/CD,试试看吧。
OpenAI 发布了开源的 Codex Security CLI 工具和对应的 TypeScript SDK。该工具可调用 Codex 模型对完整仓库、指定路径、git diff 或工作树更改进行扫描,检测安全漏洞。支持跨运行追踪发现结果、验证修复效果,并能集成到 CI/CD 流程。目前为早期版本,OpenAI 正在收集用户反馈。
OpenAI 出品的 CLI 和 TypeScript SDK,调用 Codex 模型扫描完整仓库、指定路径、git diff 或工作树更改,检测安全漏洞。 https://t.co/gTLNZw8...
OpenAI 出品的 CLI 和 TypeScript SDK,调用 Codex 模型扫描完整仓库、指定路径、git diff 或工作树更改,检测安全漏洞。 github.com/openai/codex-s… OpenAI @OpenAI We quietly released the open-source Codex Security CLI, but Hacker News found it before we had a chance to share it here... You can now use it to scan repositories, track findings across runs, verify fixes, and add security checks to CI/CD. This is an early release, and we're listening to your feedback as we continue improving it. 🔗 View Quoted Tweet 💬 0 🔄 0 ❤️ 4 👀 1019 📊 1 ⚡