codex-security · Issues· 214 open

Surface multiscan run warnings in campaign summaries

Codex Security 0.1.22: finalization resurrects resolved checkpoint deferrals and produces inconsistent durable coverage

Run warnings never reach the SARIF projection, so drift is invisible to SARIF consumers

onWorkerStatus can omit dispatch events when delegated workers run

Supported recovery for terminal unsealed scan missing findings/coverage scanId envelopes

Security audits stop with usage_limit_exceeded before completion; request investigation of retry/resume accounting

Completed path-scoped scan fails to save: "scan.target.kind: must match the workbench target" (recorded as failed preflight)

Match equivalent findings across Standard and Deep scans

codex-security: This content was flagged for possible cybersecurity risk.

Concurrent same-version scans replace the shared plugin directory and crash later workers with “os error 2”

Windows deep scans can fail when subprocess output contains non-CP1252 bytes

Multi_agent_v2 fails against Bedrock Mantle Endpoint

Feature proposal: versioned security scan benchmark corpus

Successful Deep Scan completion promotes findings from unconsumed worker checkpoints

Deep Scan counts semantic aliases as new findings and resets no-new convergence