Codex Security Cloud reviews commits with the laptop closed

OpenAI has upgraded Codex Security Cloud, its plugin that scans GitHub repositories for vulnerabilities from the cloud. As of this release, access to cyber-capable models through Daybreak Blue comes included by default, the company said in a September 29 post on X. Daybreak is the cyber defense program OpenAI extended to Ukraine’s government in September.

The plugin scans whole repos and reviews new commits as they land. It investigates findings, deduplicates them and prepares fixes for review. All of this runs in the cloud, so it keeps going after you close your laptop. It works in Codex desktop and web.

Setup starts in Plugins, in ChatGPT on the web or in the desktop app. Search the marketplace for Codex Security Cloud, install and enable it, then open Security Cloud from your installed plugins or the sidebar. Codex cloud has to be set up for your workspace already, and if the plugin isn’t available, your workspace administrator controls access. Under New scan, connect GitHub and grant access to the repositories you want covered. Then pick a repo and a compatible Cloud environment, or create one if none exists. Leave What to scan on Repository, the default, and start the scan.

Each finding under Findings shows the affected code, validation evidence and remediation guidance. When a finding offers Fix with Codex, the plugin generates a proposed patch. You review it, and only then does Create draft pull request open the PR.

Watching new commits is a separate scan. Choose the repo and environment again, set What to scan to Commit changes, and select Create. Monitoring settings for each repository let you switch the Cloud environment, set how many days of history to review, and pause or re-enable monitoring.

The plugin also generates a threat model for each project, which is a description of what the code does and where attacks could come from, and OpenAI’s documentation says it drives scan context and how findings get prioritized. You can review and edit it under Project context, then select Save.