Skip to content

Security: cartermccann/codex-micro-linux

Security

SECURITY.md

Security policy

Supported versions

Only the latest commit on main is supported. Compatibility with a Codex desktop build is documented explicitly in the README and is not implied for newer builds.

Reporting a vulnerability

Please use GitHub’s private security-advisory flow for cartermccann/codex-micro-linux. Do not open a public issue for a vulnerability that could expose local files, command execution, device access, or account data.

Include:

  • the affected script and action;
  • the overlay/app version;
  • reproduction steps using non-sensitive fixture paths;
  • expected and actual behavior;
  • impact and any suggested mitigation.

Security boundaries

These tools modify an existing local desktop-app installation. They do not download or execute remote code, require root, edit firmware, or alter udev rules.

The feature-gate patch enables code already present in the local app bundle. The ASAR repair repackages existing local files. The runtime patch adds a realized Nix store library directory to the existing launcher path.

Shell commands shown in documentation should be reviewed before execution, especially process termination and system configuration examples.

There aren't any published security advisories