Security Scanning

Get it working

Install → restart → verify. Stay on this page until Security Scanning responds.

1. 01

   Copy the install command

   Use the command on this page — it includes the correct --plugin flag for this plugin.

2. 02

   Run it in your project terminal

   Execute the command from the directory where you use Codex, not necessarily your home folder.

3. 03

   Restart or reload Codex

   Restart the Codex CLI or reload your IDE window so the new extension is picked up.

4. 04

   Verify with a prompt

   Try one of the verify prompts below to confirm Security Scanning is active.

If install fails

Fix these common issues before digging into GitHub issues.

• Command not found or install fails

  Use Node.js 18+ and confirm npx works. Corporate proxies may need HTTPS_PROXY set for GitHub and npm.

• Installed but Codex ignores it

  Restart the Codex CLI or reload the IDE window. Confirm you used the correct --plugin / --skill / --hook flag.

• Missing API keys or extras

  Open the GitHub README for env vars, API keys, or extra runtimes this community plugin may need.

About

Key features

• Adds Security Scanning capabilities directly inside Codex chat
• Installs with one npx command — no manual config editing
• Built for coding workflows
• Community-built — inspect the GitHub repo before production use

Requirements

• Node.js 18 or newer with npx available
• Codex CLI or IDE extension installed and signed in
• Check the GitHub README for API keys or extra dependencies