Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
codex-security/README.md at 150d6f6bba5a00d9e3fcccf053fc25b68cee5a57 · openai/codex-security
SDKs and CLI for Codex Security. Contribute to openai/codex-security development by creating an account on GitHub.
oss-security - Dirty Frag: Universal Linux LPE
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
CLI quickstart – Codex Security | ChatGPT Learn
Set up Codex Security, run a local scan, and review the report, findings, and coverage.
Tock OS A Rust Based Open Platform for Transparent and Secure Root of Trust Devices
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog
A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.
codex-security/sdk/typescript/_bundled_plugin/skills/security-scan/SKILL.md at 150d6f6bba5a00d9e3fcccf053fc25b68cee5a57 · openai/codex-security
SDKs and CLI for Codex Security. Contribute to openai/codex-security development by creating an account on GitHub.
GitHub - openai/codex-security at 150d6f6bba5a00d9e3fcccf053fc25b68cee5a57
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security - openai/codex-security
AI-SLOP: Develop best current practises for Open Source maintainers · Issue #178 · ossf/wg-vulnerability-disclosures
Open source projects are increasingly facing a wave of low-quality, AI-generated vulnerability reports and contributions—commonly referred to as "AI-slop." This issue aims to develop best...
An Update on OpenPRoT
OpenFang — The Agent Operating System
Open-source Agent OS built in Rust. 7 autonomous Hands. 16 security layers. 40 channels. 27 providers. Single binary. Battle-tested.
Codex Security: now in research preview
Codex Security is an AI application security agent that analyzes project context to detect, validate, and patch complex vulnerabilities with higher confidence and less noise.
OAuth Client Implementation | Bluesky
This is a guide to implementing atproto OAuth clients "The Hard Way." Optimistically, most developers will have an SDK available for their programming language which supports OAuth, and they can simply refer to SDK documentation. This guide is intended for early adopters, SDK maintainers, or developers with more sophisticated OAuth needs. It is agnostic to whether developers are building clients to work the the app.bsky microblogging Lexicons, or implementing novel application Lexicons.
Open Source Barcode Generator
Zint is a free and open-source barcode generator for desktop, command line and developer workflows, supporting many linear, stacked, postal and matrix barcode formats.
zats/permiso
Permission dialog for accessibility settings as seen in Codex Computer Use https://x.com/lexrus/status/2044929029334245819