GITHUB ACTIONS

codex exec is OpenAI's non-interactive mode for running Codex agents from scripts, CI pipelines, and GitHub Actions - here is how to set it up safely with real flags and working YAML.

The Miasma worm has evolved from package registry poisoning to directly hijacking AI coding tools - if your team clones open-source repos and opens them in Claude Code, Cursor, Gemini CLI, or VS Code, you may already be compromised.

The TanStack npm incident was not just a package-security story. It was a reminder that AI agent workflows inherit every weak trust boundary in CI.

Codex is no longer just a terminal agent. Here is when to use the Codex SDK, Codex CLI, or openai/codex-action, and how to avoid building the same agent loop three times.