EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Jul 28·5 min read
OpenAI just open-sourced Codex Security
TL;DR
OpenAI has released Codex Security, an open-source command-line interface (CLI) and TypeScript SDK designed to identify and validate security vulnerabilities in code. This tool is available for macOS, Linux, and Windows, requiring Node.js and Python for operation.
✦ Why It Matters
Start using Codex Security today to proactively identify vulnerabilities in your codebase.
Key Takeaways
- Install Codex Security using npm for easy setup.
- Authenticate with your OpenAI account before scanning repositories.
- Utilize the CLI to export findings in JSON, CSV, or SARIF formats.
- Integrate Codex Security into your CI pipeline for automated scans.
Full Summary
Codex Security is a new open-source tool from OpenAI that helps developers find and review security issues in their code. It operates as a command-line interface (CLI) and TypeScript SDK, making it accessible for various environments, including macOS, Linux, and Windows.
Users must have Node.js version 22 or later and Python 3.10 or later to utilize its scanning capabilities. The tool requires users to authenticate with an OpenAI account or API key and is designed to scan only repositories they own or have permission to assess.
Key features include the ability to scan specific paths, export findings in multiple formats, and integrate with continuous integration (CI) systems for automated security checks. This release aims to enhance code security practices by providing developers with a robust mechanism to identify vulnerabilities early in the development process.