Run bulk security scans

For the complete documentation index, see llms.txt. Markdown versions of documentation pages are available by appending .md to the page URL.

Use npx @openai/codex-security bulk-scan to review repositories in one campaign. Discover repositories from your personal GitHub account or an organization, or provide a CSV that pins every repository to an exact Git revision.

The @openai/codex-security package is public. Running scans requires Codex Security access. Follow the CLI quickstart to install the CLI and sign in.

Choose a repository source

Source	When to use it
GitHub discovery	Choose repositories interactively from your personal GitHub account or an organization.
CSV inventory	Run a repeatable, automated campaign against exact repository revisions.

Both workflows save progress, preserve per-repository results, and let you resume a campaign after an interruption.

Discover GitHub repositories

Sign in with GitHub CLI:

gh auth login

Start an interactive bulk scan:

npx @openai/codex-security bulk-scan

The CLI guides you through these steps:

1. Choose your personal GitHub account or an organization.
2. Review repositories active within the last 90 days.
3. Search the repository list and select repositories to scan.
4. Choose a directory for scan results.
5. Review the selected repositories and confirm the campaign.

Discovery excludes archived repositories and forks. The CLI records the exact default-branch commit for each selected repository in