Open-source Codex security plugin can threat-model code diffs and export to SARIF
reach_vb · x · 2026-07-23
Reintroducing the open-source Codex Security plugin for cyberdefense:
- Point it at a codebase or diff, and it can build a threat model, map attack paths, validate findings, and generate plus test fixes.
- The output can be exported to SARIF, GitHub, Jira, or Linear.
- The project is open sourced on GitHub.
Related event: Open-Source Codex Security Plugin Returns for Threat Modeling(4 posts)→
More from coding & agent
- SF 'Code Engineering' event picks up where 1,000-person harness engineering meetup left off — LangChain · 2026-10-27
- Prompt turns Claude Code into an iPhone backup forensics tool exposing 30-day 'deleted' photo copies — alex_verem · 2026-10-27
- Prompt turns Claude Code into a forensics tool finding deleted iPhone photos in backups — alex_verem · 2026-10-27
- Phones won't be mobile IDEs but control planes for agent fleets, argues Yuchen Jin — Yuchenj_UW · 2026-10-27
- Agent Field Kit launches $29 security runbooks for production AI agents — alvelda · 2026-10-27
- Cloudflare Durable Objects validated as top architecture for AI agent WebSocket servers — tristanbob · 2026-10-27