openai/codex-security

Largest clones in the code

• 434 lines in 2 placestypescript1,971 tokens
  plugins/codex-security/mcp-app/src/models.ts:3–436·sdk/typescript/src/models.ts:3–436

  3export interface ScanManifest {
  4  documentType: "codex-security.scan-manifest";
  5  schemaVersion: "1.0";
  6  scan: {
  7    id: string;
  8    producer: {
  9      name: string;
  10      version: string;
  11      [k: string]: unknown;
  12    };
  

  First 10 of 434 lines.

• 110 lines in 2 placestypescript522 tokens
  plugins/codex-security/mcp-app/src/contract-values.ts:1–110·sdk/typescript/src/contract-values.ts:2–111

  1import { hash } from "node:crypto";
  2import { isAbsolute, posix } from "node:path";
  3import type { Finding } from "./models.js";
  4import { isWindowsUnsafePathComponent } from "./windows-path.js";
  5
  6export class SealedContractError extends Error {
  7  constructor(message: string, options?: ErrorOptions) {
  8    super(message, options);
  9    this.name = new.target.name;
  10  }
  

  First 10 of 110 lines.

• 54 lines in 2 placestypescript268 tokens
  plugins/codex-security/mcp-app/src/windows-path.ts:1–54·sdk/typescript/src/windows-path.ts:2–55

  1import { parse, toNamespacedPath } from "node:path";
  2
  3// SQLite's default win32 VFS allows MAX_PATH * 4 UTF-8 bytes, including room for "-journal".
  4const SQLITE_WINDOWS_MAX_FILENAME_BYTES = 260 * 4 - 8;
  5
  6export function sqliteFilename(path: string): string {
  7  // Ordinary paths also preserve Win32 handling of device names and trailing spaces or dots.
  8  if (
  9    process.platform !== "win32" ||
  10    path.length + 8 < 260 ||
  

  First 10 of 54 lines.