Trail of Bits backports security fixes at scale with Codex
ingve · hn · 2026-11-02
Security firm Trail of Bits published a blog post on using OpenAI Codex to automate backporting of security fixes across large codebases.
The post covers the engineering practice of automatically porting upstream security patches to multiple legacy versions: how to structure prompts and verification loops so the model adapts a patch's semantics to older code, and how to run the pipeline at scale. It's a concrete deployment of coding agents in a high-stakes security-maintenance workflow, directly useful for teams maintaining multiple release branches.
More from coding & agent
- From chatbot to agent: how tools, planning and memory were added step by step — _jaydeepkarale · 2026-11-04
- Binance's $7B hack reportedly started with a tampered Homebrew install during vibe coding — xuanalogue · 2026-11-04
- $100 of GPU time edits model weights to cut thinking tokens by 40% — jarrodwatts · 2026-11-04
- Cua Driver integrates with Google Antigravity for background cross-app computer agents — m4rkmc · 2026-11-04
- Sentdex: OpenHands was the first reasonably useful agent to abstract away the code editor — rajistics · 2026-11-04
- Security advisory: run AI agents in managed cloud environments, not employee endpoints — amasad · 2026-11-04