Codex GitHub Action
A GitHub Action that runs the Codex CLI in a workflow behind a secure proxy to the Responses API, with configurable filesystem and network permissions, for building things like a custom pull-request review bot.
Codex GitHub Action runs Codex from a GitHub Actions workflow while keeping tight control over the privileges available to it, handling installation of the Codex CLI and configuring it with a secure proxy to the Responses API. A user supplies an API key for their chosen provider, such as an OpenAI or Azure OpenAI key, as a GitHub Actions secret.
An example workflow triggered on pull requests shows how to build a custom code-review bot: it creates a shallow clone of the repository, ensures the base and head refs for the pull request are available locally, runs Codex with a prompt built from the pull request's details, and posts Codex's output as a comment on the pull request. Inputs configure the API key or endpoint, the prompt as inline text or a file, where to write Codex's output, the working directory, and either a permission profile or a legacy sandbox mode controlling filesystem and network access.
The project's own security.md documents further guidance for using the action securely.