From cf46b5230a64a6f899a88588b9eed82532951e9c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
<41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 22 Oct 2026 13:54:12 +0000
Subject: [PATCH 1/2] chore(release): 0.6.1
---
.github/release-notes.md | 35 ++--------------------
.github/release-pr-state.json | 12 ++++----
examples/github-actions/codex-security.yml | 2 +-
github-action/package-lock.json | 4 +--
github-action/package.json | 2 +-
sdk/typescript/package.json | 2 +-
6 files changed, 14 insertions(+), 43 deletions(-)
diff --git a/.github/release-notes.md b/.github/release-notes.md
index 75b91cc8d9..5308ef3488 100644
--- a/.github/release-notes.md
+++ b/.github/release-notes.md
@@ -1,25 +1,10 @@
-
+
## Highlights
-Codex Security 0.6.0 adds vendor report imports, optional owner suggestions, and hosted remediation commands. Severity classification now uses a built-in rubric and three independent reviews by default; review the model-access and cost changes below before upgrading.
-
-- **Import vendor findings.** Import supported Wiz, Snyk Open Source, Semgrep Code, and Endor Labs reports with `publish findings --to local`, or publish them with `--to cloud`. Read local evidence with `findings imported`. Local imports require no Cloud login or model call and remain separate from assessed scan findings. See the [Wiz](https://github.com/openai/codex-security/blob/npm-v0.6.0/sdk/typescript/docs/cli.md#import-wiz-findings), [Snyk](https://github.com/openai/codex-security/blob/npm-v0.6.0/docs/scanner-imports/snyk.md), [Semgrep](https://github.com/openai/codex-security/blob/npm-v0.6.0/docs/scanner-imports/semgrep.md), and [Endor](https://github.com/openai/codex-security/blob/npm-v0.6.0/docs/scanner-imports/endor.md) format guides.
-- **Configurable severity reviews.** `classify-severity` uses a bundled rubric when no custom rubric is supplied. `--runs N` selects 1–10 independent reviews, with three by default. The most common severity wins, with the highest severity breaking ties. ([#1765](https://github.com/openai/codex-security/pull/1765))
-- **Optional owner suggestions.** `scan --owner-suggestions` writes a separate owner-suggestion report after supported committed Git scans. Suggestions preserve the completed scan and do not assign users. Owner enrichment is skipped when a scan cost limit is set. ([#1760](https://github.com/openai/codex-security/pull/1760))
-- **Hosted patching and source-only verification.** `patch --host` and `verify-fix --host` expose the hosted remediation protocol through the CLI. Ordinary patch and verification commands accept `--verification-mode static` to assess source evidence; omitting it preserves standard verification. Static mode sets the assessment scope and does not enforce a command-execution boundary. See the [hosted remediation guide](https://github.com/openai/codex-security/blob/npm-v0.6.0/sdk/typescript/docs/hosted-remediation.md). ([#1854](https://github.com/openai/codex-security/pull/1854))
-- **Policy previews without Python.** Policy diffs now run in Node while preserving diff formatting, cancellation, and source freshness checks. ([#1837](https://github.com/openai/codex-security/pull/1837))
-
-
-Other improvements
-
-- Patch project-trust overrides are serialized correctly for Codex. ([#1861](https://github.com/openai/codex-security/pull/1861))
-- Update Hono and the Linear SDK dependencies. ([#1831](https://github.com/openai/codex-security/pull/1831), [#1852](https://github.com/openai/codex-security/pull/1852))
-- Release verification runs test shards in parallel and reports publication progress on the release PR. ([#1798](https://github.com/openai/codex-security/pull/1798))
-
-
+- simplify user guides and correct setup instructions ([#1857](https://github.com/openai/codex-security/pull/1857))
@@ -27,20 +12,6 @@ Codex Security 0.6.0 adds vendor report imports, optional owner suggestions, and
## Upgrade notes
-### Severity classification requires model access
-
-Classification without `--rubric` previously inherited the scanner's severity without model work. It now requires Codex authentication and model access, using three model calls per uncached finding by default. Set `--runs 1` (SDK: `classificationRuns: 1`) for a single review. All requested reviews must succeed; failures do not fall back to the scanner's severity or save a partial vote.
-
-Older classification checkpoints without a recorded review count, and former inherited assessments without a rubric hash, are reclassified on the next classification request. Changing the review count or rubric also invalidates matching checkpoints. Existing results remain readable, and publication does not silently classify findings. Use `--reprocess` when changing only the model or reasoning effort. See the [classification guide](https://github.com/openai/codex-security/blob/npm-v0.6.0/sdk/typescript/docs/cli.md#classify-finding-severity).
-
-### Policy preview interpreter selection is deprecated
-
-`securityPolicyDiff(draft, python, signal)` retains its call shape, but interpreter strings and paths returned by resolver callbacks no longer select or validate an executable. `previewPolicy()` no longer resolves Python, and `pythonPath` and `PYTHON` do not affect previews. Update integrations that relied on an invalid interpreter failing or a custom executable producing the diff. Explicit resolver callbacks still run for changed drafts and propagate their errors. Omit the second argument in new code, or pass `undefined` when supplying a cancellation signal. Python-dependent generation and other operations are unchanged.
-
-### Import identity and earlier upgrades
-
-Keep a stable source key and acquisition format across vendor imports. Switching formats can create separate records or replace richer evidence with less detail; omitted findings remain stored. Review each provider's format guide before changing inputs.
-
-If upgrading from before 0.5.1, also review the [0.5.1 upgrade notes](https://github.com/openai/codex-security/releases/tag/npm-v0.5.1) and their guidance for earlier versions. Use `openai/codex-security@action-v0.6.0` for the matching GitHub Action, or pin the distribution commit in its companion release after publication.
+No additional migration steps are documented for this release.
diff --git a/.github/release-pr-state.json b/.github/release-pr-state.json
index 27c58405fc..b9ebe118f4 100644
--- a/.github/release-pr-state.json
+++ b/.github/release-pr-state.json
@@ -1,14 +1,14 @@
{
- "baseVersion": "0.5.1",
- "baseCommit": "b2fa51576d81cda5e311e7eb89131ffb13daad8b",
+ "baseVersion": "0.6.0",
+ "baseCommit": "13dcc6fec00aaf4c23a6fa7e375ccc1726b22836",
"sections": {
"highlights": {
- "generatedHash": "9c17957f706150b5ebfb2effc42159606c808ed05bc44f80320bd0fb1518c5fc",
- "humanOwned": true
+ "generatedHash": "2bce7d24f1e9fa0ae0d4b706962fcac4bc445afba5d8c733c4d8f96628782e85",
+ "humanOwned": false
},
"upgrades": {
- "generatedHash": "cdbfb62364372edf0e5202f7db41239aa0301d69187e022b9e9a9c9b0fcab298",
- "humanOwned": true
+ "generatedHash": "f0e089f37da057fc30882ef40dfe50f6b52abdc17018bf2d70c34afb22c66fe2",
+ "humanOwned": false
}
}
}
diff --git a/examples/github-actions/codex-security.yml b/examples/github-actions/codex-security.yml
index 23accb76e0..80177aef05 100644
--- a/examples/github-actions/codex-security.yml
+++ b/examples/github-actions/codex-security.yml
@@ -32,7 +32,7 @@ jobs:
security-events: write
actions: read
env:
- CODEX_SECURITY_VERSION: "0.6.0"
+ CODEX_SECURITY_VERSION: "0.6.1"
BEDROCK_MODEL_ID: ${{ vars.BEDROCK_MODEL_ID }}
# Report-only by default. Set to "high" to fail on high/critical findings.
FAIL_ON_SEVERITY: ""
diff --git a/github-action/package-lock.json b/github-action/package-lock.json
index 55e9a7d3ea..c3f5db8de0 100644
--- a/github-action/package-lock.json
+++ b/github-action/package-lock.json
@@ -1,12 +1,12 @@
{
"name": "codex-security-action",
- "version": "0.6.0",
+ "version": "0.6.1",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "codex-security-action",
- "version": "0.6.0",
+ "version": "0.6.1",
"dependencies": {
"@actions/artifact": "6.3.1",
"@actions/core": "3.0.1",
diff --git a/github-action/package.json b/github-action/package.json
index 1bec738f08..6ff7b79d72 100644
--- a/github-action/package.json
+++ b/github-action/package.json
@@ -1,6 +1,6 @@
{
"name": "codex-security-action",
- "version": "0.6.0",
+ "version": "0.6.1",
"private": true,
"type": "module",
"description": "Run Codex Security in GitHub Actions with explicit scope, budgets, and scan health reporting",
diff --git a/sdk/typescript/package.json b/sdk/typescript/package.json
index b2722e2631..97754117c5 100644
--- a/sdk/typescript/package.json
+++ b/sdk/typescript/package.json
@@ -1,6 +1,6 @@
{
"name": "@openai/codex-security",
- "version": "0.6.0",
+ "version": "0.6.1",
"description": "TypeScript SDK and CLI for Codex Security",
"license": "Apache-2.0",
"author": "OpenAI",
From 9f8f8d74cf055a4a60cb75f57e3975f2a471ec78 Mon Sep 17 00:00:00 2001
From: mluck
Date: Mon, 26 Oct 2026 10:36:43 +0000
Subject: [PATCH 2/2] docs(release): review 0.7.0 highlights and migration
guidance
---
.github/release-notes.md | 106 +++++++++------------------------------
1 file changed, 24 insertions(+), 82 deletions(-)
diff --git a/.github/release-notes.md b/.github/release-notes.md
index f78cb1f177..70f1699ab7 100644
--- a/.github/release-notes.md
+++ b/.github/release-notes.md
@@ -4,84 +4,12 @@
## Highlights
-- simplify user guides and correct setup instructions ([#1857](https://github.com/openai/codex-security/pull/1857))
-- verify Codex before caching installation ([#1855](https://github.com/openai/codex-security/pull/1855))
-- update incur to 0.7.1 and react to 19.3.1 ([#1862](https://github.com/openai/codex-security/pull/1862))
-- build owner reports without extra model calls ([#1845](https://github.com/openai/codex-security/pull/1845))
-- isolate audits and retain exact file identities ([#1859](https://github.com/openai/codex-security/pull/1859))
-- update Node to security release 26.12.1 ([#1870](https://github.com/openai/codex-security/pull/1870))
-- preserve large Git configuration environments ([#1882](https://github.com/openai/codex-security/pull/1882))
-- accept large security policy files ([#1883](https://github.com/openai/codex-security/pull/1883))
-- preserve complete scan failure diagnostics ([#1884](https://github.com/openai/codex-security/pull/1884))
-- preserve all reviewed scan feedback ([#1885](https://github.com/openai/codex-security/pull/1885))
-- update OpenCode SDK to 1.19.2 ([#1880](https://github.com/openai/codex-security/pull/1880))
-- preserve complete local vendor evidence ([#1886](https://github.com/openai/codex-security/pull/1886))
-- preserve MCP connections for large scan checkpoints ([#1873](https://github.com/openai/codex-security/pull/1873))
-- persist large scan usage at completion and failure ([#1874](https://github.com/openai/codex-security/pull/1874))
-- skip work cancelled before it starts ([#1733](https://github.com/openai/codex-security/pull/1733))
-- preserve scan directory identities and isolate Git fixtures ([#1833](https://github.com/openai/codex-security/pull/1833))
-- isolate artifact upload failures ([#1719](https://github.com/openai/codex-security/pull/1719))
-- report usage and extend integration attribution ([#1703](https://github.com/openai/codex-security/pull/1703))
-- recover publication after a lost reply ([#938](https://github.com/openai/codex-security/pull/938))
-- render MCP threat models in TypeScript ([#1839](https://github.com/openai/codex-security/pull/1839))
-- recover checkpoints at discovery deadlines ([#1594](https://github.com/openai/codex-security/pull/1594))
-- validate findings after a scan ([#1007](https://github.com/openai/codex-security/pull/1007))
-- bump ruff from 0.17.0 to 0.17.1 in /plugins/codex-security ([#1878](https://github.com/openai/codex-security/pull/1878))
-- bump @linear/sdk from 97.2.0 to 98.0.0 in /sdk/typescript ([#1881](https://github.com/openai/codex-security/pull/1881))
-- bump ip-address from 10.7.2 to 10.7.4 in /plugins/codex-security/mcp-app ([#1876](https://github.com/openai/codex-security/pull/1876))
-- bump taiki-e/install-action from 2.87.28 to 2.87.29 ([#1877](https://github.com/openai/codex-security/pull/1877))
-- keep saved-results source within import limit ([#1891](https://github.com/openai/codex-security/pull/1891))
-- allow readable interactive verification results ([#1836](https://github.com/openai/codex-security/pull/1836))
-- upgrade Codex and preserve oversized MCP recovery ([#1879](https://github.com/openai/codex-security/pull/1879))
-- normalize location paths before deduplicating ([#1867](https://github.com/openai/codex-security/pull/1867))
-- report verification failures in structured output ([#1835](https://github.com/openai/codex-security/pull/1835))
-- retain unfinished deadline checkpoints ([#1710](https://github.com/openai/codex-security/pull/1710))
-- clarify requested scope and deferred work ([#586](https://github.com/openai/codex-security/pull/586))
-- preserve literal scope paths across renderers ([#1850](https://github.com/openai/codex-security/pull/1850))
-- preserve Unicode colon source paths ([#542](https://github.com/openai/codex-security/pull/542))
-- simplify security skill instructions ([#1676](https://github.com/openai/codex-security/pull/1676))
-- update the GitHub Action runtime to 0.6.0 ([#1906](https://github.com/openai/codex-security/pull/1906))
-- separate report readers from source providers ([#1871](https://github.com/openai/codex-security/pull/1871))
-- persist run warnings in SARIF exports ([#1893](https://github.com/openai/codex-security/pull/1893))
-- keep HTML entities literal in report text ([#1851](https://github.com/openai/codex-security/pull/1851))
-- keep saved findings consistent through recovery ([#1310](https://github.com/openai/codex-security/pull/1310))
-- preserve unrated vulnerability severity on import ([#1898](https://github.com/openai/codex-security/pull/1898))
-- match scan owner hints across email case variants ([#1900](https://github.com/openai/codex-security/pull/1900))
-- preserve worker coverage during recovery ([#1064](https://github.com/openai/codex-security/pull/1064))
-- update bundled undici to 6.29.1 ([#1915](https://github.com/openai/codex-security/pull/1915))
-- bump @opencode-ai/sdk from 1.19.2 to 1.19.3 in /evals/triage-finding in the third-party group across 1 directory ([#1919](https://github.com/openai/codex-security/pull/1919))
-- bump libc from 0.2.190 to 0.2.191 in /plugins/codex-security/native ([#1918](https://github.com/openai/codex-security/pull/1918))
-- verify merge parents after a pull request retarget ([#1948](https://github.com/openai/codex-security/pull/1948))
-- wait for static checks before validating container images ([#1949](https://github.com/openai/codex-security/pull/1949))
-- trace failures to the original job attempt ([#1922](https://github.com/openai/codex-security/pull/1922))
-- document the deterministic triage CI checks ([#1932](https://github.com/openai/codex-security/pull/1932))
-- validate generated files before rebuilding them ([#1934](https://github.com/openai/codex-security/pull/1934))
-- consolidate required check forwarding into one matrix ([#1938](https://github.com/openai/codex-security/pull/1938))
-- refresh triage eval transport dependencies ([#1935](https://github.com/openai/codex-security/pull/1935))
-- preserve required checks after pull request edits ([#1944](https://github.com/openai/codex-security/pull/1944))
-- let reducers page inputs without code mode ([#1910](https://github.com/openai/codex-security/pull/1910))
-- show scan usage timestamps and account allowance ([#1911](https://github.com/openai/codex-security/pull/1911))
-- keep local action dependencies up to date ([#1961](https://github.com/openai/codex-security/pull/1961))
-- distinguish file inventory from review progress ([#1960](https://github.com/openai/codex-security/pull/1960))
-- omit excerpts for unknown diff target kinds ([#515](https://github.com/openai/codex-security/pull/515))
-- finalize runs, preserve findings, and honor project budgets ([#1912](https://github.com/openai/codex-security/pull/1912))
-- select the mutation test runtime in one setup step ([#1985](https://github.com/openai/codex-security/pull/1985))
-- keep selected results stable during retries ([#915](https://github.com/openai/codex-security/pull/915))
-- request review when the updated PR head becomes visible ([#1989](https://github.com/openai/codex-security/pull/1989))
-- use the CLI verdict contract for hosted verification ([#1951](https://github.com/openai/codex-security/pull/1951))
-- run inventory and ranking helpers in Node ([#1432](https://github.com/openai/codex-security/pull/1432))
-- remove redundant required check jobs ([#2001](https://github.com/openai/codex-security/pull/2001))
-- skip independent jobs for edits to existing Python tests ([#2002](https://github.com/openai/codex-security/pull/2002))
-- skip SDK shards when PR static checks fail ([#2006](https://github.com/openai/codex-security/pull/2006))
-- share the exact npm setup for release workflows ([#1998](https://github.com/openai/codex-security/pull/1998))
-- include unscanned repository targets ([#547](https://github.com/openai/codex-security/pull/547))
-- constrain deferred coverage paths ([#558](https://github.com/openai/codex-security/pull/558))
-- compile evals with separate Ajv installations ([#2009](https://github.com/openai/codex-security/pull/2009))
-- require opt-in for external import workflows ([#1863](https://github.com/openai/codex-security/pull/1863))
-- require Marketplace publication for Action releases ([#2008](https://github.com/openai/codex-security/pull/2008))
-- wait for the coordinator before ending CLI scans ([#2007](https://github.com/openai/codex-security/pull/2007))
-- omit GitHub event data from container validation provenance ([#2010](https://github.com/openai/codex-security/pull/2010))
-- honor cancellation during PDF extraction ([#532](https://github.com/openai/codex-security/pull/532))
+Codex Security 0.7.0 adds optional post-scan validation and improves Deep Scan recovery, usage reporting, and saved results. Review the upgrade notes for changes to external imports, hosted verification, and direct helper integrations.
+
+- **Post-scan validation.** Add `--validate` to run a supplemental validation pass after a scan and save a separate `validation.md` report. This pass makes additional model calls, leaves the saved findings and `--fail-on-severity` decision unchanged, and cannot be combined with `--max-cost`, a configured cost cap, `--dry-run`, or `--mock`. See [validation options](https://github.com/openai/codex-security/blob/npm-v0.7.0/sdk/typescript/docs/cli.md#follow-up-finding-validation).
+- **Deep Scan recovery.** Deadline recovery retains unfinished checkpoints and worker coverage, retries keep selected results stable, and the CLI waits for the coordinator to finish before returning. Scan finalization preserves findings and honors project budgets.
+- **Clearer usage and progress.** Scan output distinguishes file inventory from review progress and reports usage timestamps and account allowance. Large usage receipts, policy files, checkpoints, failure diagnostics, and reviewed feedback are retained.
+- **Owner reports and saved results.** Scan owner reports are finalized without an extra model call. Saved findings remain consistent through recovery, SARIF exports retain run warnings, and report rendering preserves literal source paths and text.
@@ -89,10 +17,24 @@
## Upgrade notes
-Review migration steps for these breaking changes:
+- **External imports require opt-in.** Set `CODEX_SECURITY_ENABLE_EXTERNAL_IMPORTS=1` before using `publish findings`, `findings imported`, `import github-advisories`, or the corresponding SDK operations. Only the literal value `1` enables these features. SDK callers that supply `dependencies.environment` must include the flag there. Previously imported records are retained. See [external import setup](https://github.com/openai/codex-security/blob/npm-v0.7.0/sdk/typescript/docs/cli.md#import-vendor-findings-locally).
+- **Hosted verification uses the CLI verdict contract.** Remove imports of `FindingVerificationCheck` and replace reads of `verification.checks` with `verification.status` and `verification.evidence`. The original executor report, when supplied, remains available in `execution.finalResponse`. Update custom executors to return the matching finding `id`, a status of `fixed`, `still_vulnerable`, or `inconclusive`, and nonempty evidence. See [the hosted remediation contract](https://github.com/openai/codex-security/blob/npm-v0.7.0/sdk/typescript/docs/hosted-remediation.md).
+- **Direct inventory helper calls move to Node.** Integrations that invoke the removed Python inventory and ranking scripts must use the bundled launcher and its `--helper` commands below. SDK and MCP callers use the new implementation automatically; the inventory and ranking artifact formats are unchanged.
+- **Committed-diff scans require a clean, full checkout.** Check out the requested head revision and commit or stash local changes before running a committed-diff scan, including with `--validate`. A mismatched checkout or local changes now fail before scanning. See [scan options](https://github.com/openai/codex-security/blob/npm-v0.7.0/sdk/typescript/docs/cli.md#scan-options-and-output).
+
+
+Direct helper migration
+
+Use `launch_codex_security_mcp` from the bundled plugin's `scripts` directory, or `launch_codex_security_mcp.cmd` on Windows, with the existing arguments after the helper name:
+
+| Removed Python invocation | Launcher arguments |
+| --- | --- |
+| `generate_in_scope_files.py` | `--helper generate-in-scope-files` |
+| `generate_rank_input.py make-repo-scope-input` | `--helper make-repo-scope-input` |
+| `generate_rank_input.py make-diff-rank-input` | `--helper make-diff-rank-input` |
+
+The removed `rank_preview.py` implementation is incorporated into these helpers. See [diff helper examples and Windows quoting](https://github.com/openai/codex-security/blob/npm-v0.7.0/plugins/codex-security/skills/security-scan/references/scan-artifacts-and-ledger.md).
-- use the CLI verdict contract for hosted verification ([#1951](https://github.com/openai/codex-security/pull/1951))
-- run inventory and ranking helpers in Node ([#1432](https://github.com/openai/codex-security/pull/1432))
-- require opt-in for external import workflows ([#1863](https://github.com/openai/codex-security/pull/1863))
+