Skip to content

Security: Do-fei/codex-live-panel

Security

SECURITY.md

Security

Codex Live Panel V0.6 is a local-only MVP.

Data Access

The app reads:

  • local Codex session logs under ~/.codex/sessions/**/*.jsonl
  • the workspace path selected in the UI
  • Git status and diff for that workspace

The app does not intentionally upload source code, send telemetry, read browser cookies, or connect to third-party services.

Reporting Issues

If you find a security issue, please open a GitHub issue with a minimal reproduction and avoid sharing private session logs, API keys, tokens, or proprietary source code.

Current Limitations

  • V0.6 is not notarized.
  • V0.6 has not received a formal third-party security audit.
  • Session log parsing is best-effort and may change as Codex changes its local log format.

There aren't any published security advisories