Search the Catalog
MCP Inspector
Market Space
Safe-use guides
OpenAI Codex security directory
GitHub
Published by OpenAI
High risk
Brings GitHub repository, issue and pull-request workflows into Codex. Review changes, address feedback and investigate failing GitHub Actions checks. Prepare code changes for review using connected GitHub or GitHub Enterprise access.
Security assessment
Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.
- Can merge PRs, push commits and trigger Actions workflows: Can deploy code, applications, containers, workflows, or infrastructure to a persistent environment.
- Can delete repository files and whole repositories: Can delete records, files, projects, messages, or resources that may be difficult to recover.
- Repository governance/admin writes: Can create or change persistent records, files, projects, permissions, settings, or credentials.
- Long-lived PAT from environment variable: Uses credentials, OAuth grants, API keys, or tokens that may remain valid after the current session.
- Posts issues, PRs and comments as the user: Can send messages, comments, invitations, posts, or published content attributed to the connected user.
The interactive security report will load automatically.