Codex GitHub Action

Use it when

• You want an automated Codex review posted as a comment on every new pull request without adopting a hosted review product
• You need to run codex exec inside CI with reduced privileges so the runner's sudo access and your API key are protected from the agent

What it solves

Not the fit when

• Requires an OpenAI or Azure OpenAI API key; no local-model option documented
• Windows runners support only safety-strategy: unsafe
• drop-sudo removes sudo for all later steps in the job
• Permission profiles require Codex CLI 0.138.0 or later
• interactive local pair programming
• hosted turnkey code review service
• secret scanning of the repository

Install

Add a step with uses: openai/codex-action@v1 to a GitHub Actions workflow, after actions/checkout, with an OpenAI or Azure OpenAI API key stored as a repository secret

Invoke

uses: openai/codex-action@v1 with openai-api-key, prompt (or prompt-file), and permission-profile ':workspace'; read the result from steps.<id>.outputs.final-message

Alternatives

No reviewed alternatives recorded yet.