Disambiguation (buyer-critical): this is codex-action, a GitHub Action, not the standalone codex terminal CLI agent. The Action installs and runs Codex CLI inside GitHub Actions, starts an authentication proxy to the OpenAI Responses API, and exposes workflow inputs for prompts, model, effort, version and a custom Responses endpoint such as Azure OpenAI. Security is layered: permission-profile selects the Codex filesystem/network policy (:workspace, :read-only, or a named profile), while safety-strategy controls runner-process privileges through drop-sudo, unprivileged-user, read-only, or unsafe. These controls do not compose in every combination: permission profiles conflict with the legacy sandbox input, and safety-strategy: read-only cannot be combined with a permission profile. The official security guide also warns buyers to restrict who can trigger workflows, treat PR/issue/commit/instruction content as untrusted prompt-injection input, minimize repository permissions, protect API secrets, and prefer running the Action as the last step in a job. Telemetry note: the Action repository does not document a separate Action analytics layer, but it installs Codex CLI and invokes codex exec; current Codex source starts that command with analytics enabled by default, builds its telemetry provider, records a process-start event, and installs SQLite telemetry. The codex-version input is empty by default, so teams that need reproducible telemetry behavior should pin a reviewed CLI version and review their Codex analytics/OTel configuration. The Action itself is free and Apache-2.0, but it requires the user's OpenAI or Azure-equivalent API key, so the real operating cost is provider API usage rather than a separate Action platform fee.
OpenAI Codex GitHub Action
OpenAI's official GitHub Action that runs Codex in CI
OpenAI's official GitHub Action for running Codex CLI in GitHub Actions workflows with filesystem/network permission profiles and runner-level privilege controls. This is the CI/CD Action, not the terminal Codex agent; current Codex exec enables analytics by default, so telemetry policy needs review.
Pricing
Action is free and open-source (Apache-2.0). Requires your own OpenAI API key (or Azure equivalent) — you pay provider API usage; no separate Action platform fee.
Platforms
Distributed as a GitHub Action for GitHub-hosted or self-hosted runners; installs Codex CLI and a Responses API proxy. Filesystem/network policy uses `permission-profile`, while process privilege uses `safety-strategy` (`drop-sudo`, `unprivileged-user`, `read-only`, `unsafe`; Windows supports only `unsafe`). Supports custom/Azure Responses endpoints plus model, effort and CLI-version inputs. Current Codex exec analytics and SQLite telemetry require policy review.
Categories
Tags
Alternatives
Claude Code GitHub Action
Anthropic's official GitHub Action that runs Claude Code in CI
Anthropic's official GitHub Action that brings Claude Code into GitHub PRs and issues — answering questions, reviewing code, and implementing changes when triggered by @claude mentions or workflow automation. This is the CI/CD Action, not the terminal agent.
Gemini CLI
Google's official CLI agent for coding with Gemini
Gemini CLI is Google's open-source terminal agent for coding with Gemini models, shell/file tools, web fetching, Google Search grounding, and MCP extensions. As of 18 June 2026, unpaid tier and Google One users are being moved to Antigravity CLI; supported Standard, Enterprise, and Google Cloud access paths remain the safer fit for teams.
CodeRabbit
AI-powered code review
AI-powered code review tool that automatically analyzes pull requests and provides line-by-line feedback on code quality, bugs, security vulnerabilities, and best practices. Integrates with GitHub and GitLab as a bot that comments on PRs. Uses LLMs to understand code context and suggest improvements. Learns from your codebase patterns and team preferences. Supports all major programming languages. Reduces review cycle time while catching issues human reviewers might miss.
Related Tools
MEDUSA
AI-first security scanner for LLM, agent, MCP, and RAG codebases
MEDUSA is an AGPL-3.0 AI-first security scanner from Pantheon Security that checks AI and machine-learning applications, LLM agents, MCP workflows, RAG pipelines, repository-poisoning risks, secrets, and agent-specific compromise patterns.
Mergify
Merge queue, CI insights, flaky-test controls, and stacked pull requests for GitHub teams
Mergify is a pull request automation platform that keeps main branches green with merge queue batching, merge protections, CI Insights, flaky-test detection, and stacked pull requests. Its Stacks workflow turns commits on one local branch into focused PR chains, helping teams review large AI-generated or feature-heavy changes without losing queue safety.
Terrateam
Open-source GitOps automation for Terraform and OpenTofu pull requests
Terrateam is open-source GitOps infrastructure orchestration for Terraform and OpenTofu pull requests. It automates plans and applies in GitHub workflows, supports monorepos and many workspaces, and adds apply-only locks, OPA/Rego policy checks, cost and drift signals, and approval controls without forcing teams into a separate IaC platform.
Digger
Open-source IaC orchestration that runs Terraform plans and applies from pull request comments
Digger is an open-source infrastructure-as-code orchestration tool for running Terraform and OpenTofu plan/apply workflows from pull request comments. It uses the team’s existing VCS and CI runners instead of adding a separate runner fleet, supports GitHub, GitLab, and Azure DevOps style workflows, and stores PR-level locks and plan cache in the user’s cloud account.
Twill AI
Autonomous coding agents that ship while you sleep
Twill is an autonomous coding agent platform that implements features, fixes bugs, and ships pull requests without manual intervention. Uses structured workflow of research, planning, human review, implementation in isolated sandbox, AI code review, then merge. Supports custom agent configurations with multiple LLM providers, isolated dev environments for verification, and integrations with GitHub, Linear, Sentry, Notion, and cloud platforms for end-to-end engineering automation.
Poethepoet
Task runner for Python with Poetry and uv
Poethepoet (poe) is a batteries-included task runner for Python projects that integrates with Poetry and uv package managers. Define tasks in pyproject.toml, compose them in sequential, parallel, or DAG workflows, and execute with full virtual environment context. Supports shell commands, Python scripts, environment variables, .env file loading, and auto-generated shell completion across bash, zsh, and fish for streamlined development workflows.