← Files Codex SecurityARCHIVED FILE
integrity.json
17.2 KB · Oct 3, 2026 · 06:03 UTC
{"files":[{"path":".app.json","sha256":"e4d5b22326ee380de5d779f7b5ba590c8d1bee9a80e8869fb2bd7f4def8e974d"},{"path":".codex-plugin/plugin.json","sha256":"3ddcc187fe2f1aff961bf55444e70bfbc3f825b6185ab3f29860d1a813a395f9"},{"path":".mcp.json","sha256":"40b84baf510169eadfd5f0fe0ad95001caedb7bc662d77c9ac2a4fbec7dd0845"},{"path":"OWNERS","sha256":"49be76d15302e4f158b3ef907e9802a955ab9c0a59a039827eab4cb6221f0e5f"},{"path":"assets/logo.png","sha256":"9b9c2b09b2fa064611fb62307d321d5c2ea70cf0789f7ce34cdb0fc0d9190b3a"},{"path":"examples/completed-scan/coverage.json","sha256":"d55b9b98d48323b4659dfee6531ec83ec538f2084325412b7188bf85ad68b01b"},{"path":"examples/completed-scan/findings.json","sha256":"a6dc4521d6478828224fbafc33585401a47bfeb0e56e07b5d2886e8a29937f2f"},{"path":"examples/completed-scan/report.md","sha256":"c2083b2f763ed5ddcee4524ee01025c9b8996e1e9740263d751494b7a61fe82e"},{"path":"examples/completed-scan/scan-manifest.json","sha256":"d245ae9fc62a676293c6821e562d1a2d7d59db12d5b8dc99b85f7c5f1462fe00"},{"path":"mcp/helpers.mjs","sha256":"c272f3761e5c405619b26e4d0fd621df5ac189f2ee1bb32b975480e9835f9ca8"},{"path":"mcp/helpers.mjs.br.part-000","sha256":"a771236cf650b155f4afc89169897ca199bafaa673187b781904df8bee8af96a"},{"path":"mcp/native/COPYRIGHT-library.html","sha256":"0a65bb747c49c7bb816cbc7188319bd6e4e8d08091c1190b8a3c0971c47968ed"},{"path":"mcp/native/THIRD_PARTY_NOTICES.txt","sha256":"bcb3277e216ef458f18b80ddf97e1b7c2827e920a2c432077ff6f7d060281445"},{"path":"mcp/native/darwin-arm64/unix.node","sha256":"1895d5afd007ce02210075683413be6088ea20af8a8608a42ac82b7d9bf90181"},{"path":"mcp/native/darwin-x64/unix.node","sha256":"94aba646f50e669b873b44f78512886dcf78be87a13feb95471e687fdc1f9f91"},{"path":"mcp/native/licenses/Apache-2.0.txt","sha256":"074e6e32c86a4c0ef8b3ed25b721ca23aca83df277cd88106ef7177c354615ff"},{"path":"mcp/native/licenses/BSD-2-Clause.txt","sha256":"f32fb3b417a194167cfad068223fc975ba96c5960513a10f66a3c28720aec1df"},{"path":"mcp/native/licenses/MIT.txt","sha256":"b85dcd3e453d05982552c52b5fc9e0bdd6d23c6f8e844b984a88af32570b0cc0"},{"path":"mcp/native/licenses/Unicode-3.0.txt","sha256":"f5062c9a188d81dfe66b56db4182dcf9e4b17c0d9b0d311a8e20b3a1b075c443"},{"path":"mcp/native/linux-arm64-gnu/unix.node","sha256":"bd89532fbd21d251d9c645d6026864b0a08b16565bedb018e627e459cae0ddef"},{"path":"mcp/native/linux-arm64-musl/unix.node","sha256":"65475c3deb4ed355739ad7395e39204f5ffcc945c61b2e42ca357560de3fe7de"},{"path":"mcp/native/linux-x64-gnu/unix.node","sha256":"d19c3d41b2993543a1296dc38d2183df4a947349b45f3c43618c4ecde74e3cac"},{"path":"mcp/native/linux-x64-musl/unix.node","sha256":"46fa397234fad923a2e325f80e2a833ba48c79b32bbb7f0452fb7f0791de5d5e"},{"path":"mcp/native/win32-arm64/windows.node","sha256":"df8dd512fd8d92a8af3fede3f00a235732f847c6f3da91a2b9a702650ddd7439"},{"path":"mcp/native/win32-x64/windows.node","sha256":"f961856d20361508fa3b5ad05a4fb04f07d0dff4d7b60f3cfc377467b518c17b"},{"path":"mcp/server.mjs","sha256":"c58624aa4c4bd3efbb67601c9c2e98759f167f608320a6cd342814b2f2e6a636"},{"path":"mcp/server.mjs.br.part-000","sha256":"0259e86ae3ceb3c555521d959fd9cddb0d67e2921fc1db9fd27a55d849a48806"},{"path":"mcp/server.mjs.br.part-001","sha256":"3c6c93cd01ac739436e91ffe2685c5267672cf18794dbe1b19ac1ac5f93d421f"},{"path":"preflight/capability-profiles.toml","sha256":"543a0f6a0e81cbbac1fe43e2e3d44d6163a6792384ab9c768ac519295d9ec8a1"},{"path":"references/artifact-storage.md","sha256":"851076fcdc93c7adb87f3e26ff103c5546b875e2bc08ddb676fbbca0827899b1"},{"path":"references/config-preflight.md","sha256":"6ba05681c8d94968842fc98553b58b8fc5f1ea3da45834a41dd60179c8bbb9f3"},{"path":"references/core-scan.md","sha256":"77b082eb8613cf93427ff730e4ae5d85b0a0dca37c02a8af1ea69f679ac3d1d9"},{"path":"references/desktop-config-preflight.md","sha256":"d03e7c604a0459509a4a3238289c3ad0725811e8b11fb7d0044ce8bcee6a7a26"},{"path":"references/final-report.md","sha256":"9fe5a42b37964def3a8394449c3502e8b6ee50b8f85e6525313e23ba2dcd5040"},{"path":"references/finding-detail-fields.md","sha256":"9e4dcc5633ca1f31291688606e4ec0d56067ed485e748ac9e7d433984f9ab451"},{"path":"references/sarif-adapter.md","sha256":"32725cc851d998c9b33f0232c435d720383c86bc13526b04d356b85d08101cc5"},{"path":"references/scan-artifacts.md","sha256":"d8d416b359b9a46bd3d9cf9fb487d1ff2dc6eb32dc26e93ab47de7b1d240f479"},{"path":"references/scan-contract.md","sha256":"8a84ca15feef973044bfe619b4e586bf9323b9cbc2f386b961138c76ebd6d189"},{"path":"references/scan-prologue.md","sha256":"1d23ab6db651134b54307cdea873ffa711a83458bda563f1e126f35e83b278e9"},{"path":"references/security-guidance.md","sha256":"a0f49ad3bd09fa6180a100d81326b75bf87a2d49893ca9e37b64ab151c759a80"},{"path":"references/static-finding-assessment.md","sha256":"78de933caef1c8d971dab83fbb71877602a1197a52eaa7a59d6ff7bc399d0bc7"},{"path":"references/threat-model.md","sha256":"f53d10c617d45d671e7cb15408f87c4f36b29026e2a6a59d1457881780b6818a"},{"path":"schemas/coverage.schema.json","sha256":"7964b132998ca4dcdd19c75f5d92483e1d44cb71462237709b968ec548c10652"},{"path":"schemas/definitions/artifact-common.schema.json","sha256":"8187236867a2397515571d937deac92dcbf23d3db5e330d32b1f24aced4b9abc"},{"path":"schemas/definitions/discovery-candidate.schema.json","sha256":"b0cf54fc1ae1947db0f6a6f73e17d1124d528226de763fb89489d05fd612331b"},{"path":"schemas/findings.schema.json","sha256":"a480337cc0fa4c48c44fc7be17c6c4348767815570775cda80f2aaf797b8e56c"},{"path":"schemas/patch-risk-assessment.schema.json","sha256":"536492481c5b67910ce8d3754d61c7d5a44c5cb78fe3f081e8f5d1620d6ae9c9"},{"path":"schemas/scan-manifest.schema.json","sha256":"265a48629113f77cd65a3127f1f7e95d3c39ae60e868685837a6aa31d4133310"},{"path":"schemas/tools/candidate-attack-paths.schema.json","sha256":"f6fcb643b4b975466c4717356a0768b0572812cd832578d8714557f5e3d16935"},{"path":"schemas/tools/candidate-validations.schema.json","sha256":"c871eb3462b7873c1774e6aade62acdd570636e43c0ac3c7b41b7041ca5627e9"},{"path":"schemas/tools/deep-reducer.schema.json","sha256":"5f0c25f826445251415986097c41127018d19b6c690cd99720fd9365893b0028"},{"path":"schemas/tools/discovery-candidates.schema.json","sha256":"dcd2031d64015c69b415c66e57d6e90cbdef91152a445a6f409c14d80153afa6"},{"path":"schemas/tools/review-items.schema.json","sha256":"acc4f4909446a62811728dd1d6581456053da8d26f774b7af208a1856f86ac5b"},{"path":"schemas/tools/scan-draft.schema.json","sha256":"d5970c06e2ec00d1da5b0e84b677244f32046fd99c81901e608b7974b9ab0d89"},{"path":"schemas/tools/worker-threat-model.schema.json","sha256":"a00f875918794661316a033bd2d03426d61ab1e41d4a36c548c07525dcfde478"},{"path":"scripts/config_preflight.py","sha256":"37b9f4cee4c4dddade0e8599ea8df19aee29a99bd1be956b553ab46c3b63d407"},{"path":"scripts/deep_scan_config.py","sha256":"44229bc7b2e7f4c7654e2e9ed91650a28630eeb00fcc38358f19d69739771f8c"},{"path":"scripts/deep_scan_defaults.json","sha256":"89bdb96ff721f0f1d509f3c5c83f5fc89022f14406d0a84df781b7e0e42cde66"},{"path":"scripts/deep_scan_workbench.py","sha256":"c659739775e192dee0f90a42549a1763fb95228fb5fd17579812ab454bfc7d21"},{"path":"scripts/filesystem_identity.py","sha256":"2b3a22761f28faa2f45f192ff14b17fd80f1f43d9d4174007c51d21f4cbf47c1"},{"path":"scripts/finalize_scan_contract.py","sha256":"7f191c50ded50600b0a70be1e11b724f0355f166a690312226990d88e895d159"},{"path":"scripts/finding_preview.py","sha256":"0df185e83a55cfcd9da151054de32b04e8f0bc0ceee3a2d9269d0d119fc12854"},{"path":"scripts/generate_in_scope_files.py","sha256":"e59583c111b4f3edd3f57e114bfb7f62a7dbad8424b4851bdfd23a8219336806"},{"path":"scripts/generate_rank_input.py","sha256":"0c0ead74ae98b4adfbd6a2eacb91ea492b11e60434c4259ae36213c0ddc5f3f8"},{"path":"scripts/launch_codex_security_mcp","sha256":"b82af11478dc85f666b6ec0919c53034dd287c29ffcb1af7e5debbb425618c5d"},{"path":"scripts/launch_codex_security_mcp.cmd","sha256":"2539c0914bb130d76629e8176ac93762cd0051677ac2c525e7ba524b0b828f80"},{"path":"scripts/normalize_candidates.py","sha256":"8da9b66deec6320a3e55c033a097480bedd340f0442b31077999a2e2d82e851e"},{"path":"scripts/rank_preview.py","sha256":"013885da19308feeb0bcea8968097ba8eee8b063b23a6ca5af8a7269ca777afa"},{"path":"scripts/report_projection.py","sha256":"474de8e927442b1c5c7fc4adb5addd98906ae86db05da1aa20bd54ad5fca48fb"},{"path":"scripts/reserved_artifact_paths.json","sha256":"58ba1cf42437ac3af65c85a66eeff46f22572e45081fa2620f4b241173efcc50"},{"path":"scripts/snapshot_sqlite.py","sha256":"a501b0f4b6656f4f9b6a389835e73f0d8105051191646b64af4268f0d4a3eaee"},{"path":"scripts/validate_scan_contract.py","sha256":"38a5eb0126ea06b22eb82c5829e4ffcbebd2c1e55f99634454622fedd7b9e1a0"},{"path":"scripts/validate_tracking_source.py","sha256":"802fb3062456128c7adceb6048183811120255b222018e123e10c5ba0caa4bdc"},{"path":"scripts/windows_scan_local_files.py","sha256":"3034ec0b2e5d29fb8edbbd7237b91b1063b0245cdc546d85209129fef1ab2fbf"},{"path":"scripts/workbench/__init__.py","sha256":"3635fffd60f51d5a5d889e20c91df803c667f8b1b29cbcf68c96cb2e0a9c33ed"},{"path":"scripts/workbench/handoff.py","sha256":"83606054cc47064514a612d8ce16353cce669fe07b61852d73bc0c94b75c8ee5"},{"path":"scripts/workbench/storage.py","sha256":"973275d28c851b1b8408f7ac59e89a2a68057f2aecb4831e6aa2396c83a39e6d"},{"path":"scripts/workbench_cli.py","sha256":"74752d032261afd831876d774724b150b35d6c8f0a3f70574c5c8ddad20f31b3"},{"path":"scripts/workbench_constants.py","sha256":"06548d28c6d66b99f6c11f63918101c6cce39df6346fc6c5e977b9d09cd2a950"},{"path":"scripts/workbench_dashboard.py","sha256":"5770b77ff551cde46c22fae9239ef8ce28254320da77876e0b936dc35b829967"},{"path":"scripts/workbench_db.py","sha256":"01d7d27013f24cf26cbca4a6e2331d7eb1bd0afc5e570c44376cd3e2e4fd5cb7"},{"path":"scripts/workbench_feedback.py","sha256":"675bc5897444a39950297f74353fa6fd296f73d3a5ac87d294647ae8425151dd"},{"path":"scripts/workbench_finding_index.py","sha256":"410f4c2fb2bd063130e945d06aad63582b6a3e6fed9c448dcf740d85a6c3ce78"},{"path":"scripts/workbench_finding_workflows.py","sha256":"de44bfc28c0a4d2021643a50d5a42408f4853bb4a21cf9d1f4ffb43a695b06ce"},{"path":"scripts/workbench_findings.py","sha256":"b78e2ca68f29cf002b6215985225e1b3996c8edd08601569945405d42c33b301"},{"path":"scripts/workbench_native_indexes.py","sha256":"0ada4190b7050fde77c3f04a8f36b1f6479da368aa1ed39c9587ce23645ba468"},{"path":"scripts/workbench_progress.py","sha256":"d106181710b59c3cd2d66a26d4a4556741d02d606999224a36cfb09771092a6e"},{"path":"scripts/workbench_publication.py","sha256":"7813a522da6924e065a5a517efc54e80529c686773d084297f760e405b1cecd5"},{"path":"scripts/workbench_remediation.py","sha256":"d0c7a4b3a283aea128802b4c1a4295580bc2ebd83c6c7108eb1ce288aaa20017"},{"path":"scripts/workbench_saved_results.py","sha256":"db445b651bd677359ef0a5c2bbb70e896eccd60becbd80e8c7a77aa3010f289c"},{"path":"scripts/workbench_scan_history.py","sha256":"920a4c6448c4ee87500e4488fdfa5a294dfa0696f94f55f2e2cbe544e5acf60f"},{"path":"scripts/workbench_scan_start.py","sha256":"8ce5f6e6d34670026f50da234c881074bd4864f41c9c574f6b2232ef968c7b1e"},{"path":"scripts/workbench_scan_usage.py","sha256":"4fb61d682ba05839ad57d33a8a2c9a9ffaa51ea7721c2cc7d629d2d687e2607a"},{"path":"scripts/workbench_schema.py","sha256":"6a382c792b39c0a41118a2d4325b967f3cb0dca2a2e6e84411e4e72a675372e7"},{"path":"scripts/workbench_severity.py","sha256":"6313c3302a40504e8b1ebaabcc081bdcbbb97c9b348a7d63c381ea04042e898d"},{"path":"scripts/workbench_source_excerpt.py","sha256":"0cd15d26c3a1feadf1858d1be25f9703ad09307ab1ecfb866260b8c1991cf74e"},{"path":"scripts/workbench_target.py","sha256":"bc21dc8cb392a5639d787fde956f6b4d2769bf9c3f1cb805f164557df787563c"},{"path":"scripts/workbench_target_state.py","sha256":"f48897fb7937e7474126dc88f85bcc359a1a99fb845a77f5d896dbe8b506b45a"},{"path":"scripts/workbench_validation.py","sha256":"3cc29fc7a342dc9b55976c37c641c1e7a2abf91625fb9abfb1165a59e251ad29"},{"path":"skills/assess-patch-risk/SKILL.md","sha256":"b7337a909fe0ea7f3b203178df60161ea42236405c0bb8697d43ec5736be744b"},{"path":"skills/assess-patch-risk/agents/openai.yaml","sha256":"fec61f321e18022579cac25ffb33286f48cc316172a0b8d502f2bf4faecba025"},{"path":"skills/assess-patch-risk/references/risk-rubric.md","sha256":"078a71175191580791685808980cb1815dc97265cfee8c0ddad1f4d3b8203b4a"},{"path":"skills/assess-patch-risk/scripts/validate_patch_risk_assessment.py","sha256":"b57a804b1e30c94ed01d5a3a36f8a31b15a6e3b9f751a41c5ade07ff35019d77"},{"path":"skills/attack-path-analysis/SKILL.md","sha256":"9f9f45603c68a1e796d8151b3373842aa7e89f0e1dc8e985f7ab1bb342547444"},{"path":"skills/attack-path-analysis/agents/openai.yaml","sha256":"d9355cbcf0bc81098c9e837d9d4e8644e598410d052a862ab11cf91ef9ccb633"},{"path":"skills/attack-path-analysis/references/attack-path-facts.md","sha256":"8c8f1abb46ddf045d76908df78e3a273da8d61aaa0f37fc992534a3ddfe42430"},{"path":"skills/attack-path-analysis/references/severity-policy.md","sha256":"44719bb96a1065df7683a4f7968145efd3b3f365ec95c22a4bed5b20b5d8a0a1"},{"path":"skills/deep-security-scan/SKILL.md","sha256":"e3e758d1a6b96b42453fc631b58e04e851cec71318b18d53e2d1c344f6edc4db"},{"path":"skills/deep-security-scan/agents/openai.yaml","sha256":"3f8d781bf372b0d053a017eabaebf947d5d48d9be2b82cb67da211128924c3f1"},{"path":"skills/define-security-policy/SKILL.md","sha256":"2817e1a03980a7ebea478c8d9e6c622e3c6205123e767a1e32f0204c06729cc7"},{"path":"skills/define-security-policy/agents/openai.yaml","sha256":"8c40b0f8bd1eb7feabdcea69f12c2a7d18e492e96893c0702507ffd808b8e2b4"},{"path":"skills/finding-discovery/SKILL.md","sha256":"1d3a159a5ed83722ddf7369dad9f7788e283454a8ee963cef35ccd8102ea8b0e"},{"path":"skills/finding-discovery/agents/openai.yaml","sha256":"c044dd83a7624b90ed19f11adc899202685ce64e32502f1d46225f69f9a2c962"},{"path":"skills/fix-finding/SKILL.md","sha256":"ba7311f43b2c0742da0d5c6bdb2f0b26601c09cc59747cf8c62a09f8d0bb86d2"},{"path":"skills/fix-finding/agents/openai.yaml","sha256":"5dac397bf3a17e45283691b656179eb56d19e34881af380f098d7c455bce52d7"},{"path":"skills/propose-security-hardening/SKILL.md","sha256":"ad07d88da7c2bc9e551849cdde686b0daad380ed0aac798e6c06444681d75959"},{"path":"skills/propose-security-hardening/agents/openai.yaml","sha256":"1bcab19d48eb4b768c0dc435bd2e738f1471c2345cce5865bb31bdca5be0b134"},{"path":"skills/propose-security-hardening/references/proposal-format.md","sha256":"6c0000722629098365afbf6809c3402121f90438600fb574fbc2c77aeb649ba4"},{"path":"skills/security-diff-scan/SKILL.md","sha256":"0a4c519ad713585876ea7eb0a8af4b59892c86746f4c69851db9ab347b7fad2f"},{"path":"skills/security-diff-scan/agents/openai.yaml","sha256":"f3d31e09befbb8532b53fdccb63a34c0b894a7fb96215b40e84647cd9f8e1b50"},{"path":"skills/security-scan/SKILL.md","sha256":"5b8f5d7debeca14c6b37e8e7ba737671362b8eb4b7f49e693c99c6bd04bc8fa0"},{"path":"skills/security-scan/agents/openai.yaml","sha256":"5952ae0b0f7d378b7e6ab3fe793335a0e26e5d15bd2d7fdd14ecdd795607ceb6"},{"path":"skills/security-scan/references/desktop-scan.md","sha256":"fc20c0a72913cf88f99879091c5b64e4161a42670e84bff29b629210006cd860"},{"path":"skills/security-scan/references/scan-artifacts-and-ledger.md","sha256":"443084c974eb80747a6dc4e092c7fca55f412ca5ab3f14e2d27dc1223cc690a4"},{"path":"skills/threat-model/SKILL.md","sha256":"f45f02d9f607ec6797b730c71b15310f971403193cc56a984a1cbb1710b495ee"},{"path":"skills/threat-model/agents/openai.yaml","sha256":"a3533478c2548248ef07c9afbbe0a7451f1fa1882883b4def0906d8113b7dd6c"},{"path":"skills/track-findings/SKILL.md","sha256":"8e3726e86ef0df509f1a635961f268e1bf04a4622a83e21c1d079f546cc61dcb"},{"path":"skills/track-findings/agents/openai.yaml","sha256":"39e73c0003afc8bd9d3cf53c027d8274e724dc41f46e3cd6863ad34bb4de4200"},{"path":"skills/track-findings/references/github-security-advisories.md","sha256":"f56010d265d0ce56e555dd73a92777a6d3be8f5d31bd2af7ff163423a667d10e"},{"path":"skills/track-findings/references/jira.md","sha256":"05affbdefbfd8054d08f16e5fe15729ade440b5627a4561f8693bd97fb3a3ea2"},{"path":"skills/triage-finding/SKILL.md","sha256":"70b0e771f286443ea32bbf466ad378b36f9123b4aa171ab02c6680fdbdb704f9"},{"path":"skills/triage-finding/agents/openai.yaml","sha256":"1d53cfba14878c05745309eec3f682f70c5e8d49ecc033628cf832a5dd27c9cb"},{"path":"skills/triage-finding/references/github-rest-intake.md","sha256":"f026bef041ca92f3d9b47a131794aa54e98cf8d7716fae3f71ab53e8ab09c79f"},{"path":"skills/triage-finding/references/ticket-intake.md","sha256":"bd545655e0402f5f326f34191a67b6dd30c382914e9ae81b2e66ad745860e78a"},{"path":"skills/triage-finding/references/triage-result-contract.md","sha256":"321027c102cf36119376ef86f0701a4a7c6fc22e46d28fd240639aae156b134a"},{"path":"skills/validation/SKILL.md","sha256":"3c4660f79b12a92728e6bb25027064c3a911d0960d39aeafc8fda9e42ce517a5"},{"path":"skills/validation/agents/openai.yaml","sha256":"7516bcd4748b55566694284d7d953a7db0c94d5a2123895fabb36d7d9d7d74e4"},{"path":"skills/validation/references/validation-guidance.md","sha256":"42f7a9d85b78d0deb5e6eda82b8c59ed101c40d36065833b9cf39fe50699e255"},{"path":"skills/verify-fix/SKILL.md","sha256":"3d4530484c7e4c18b6afe7c6527247e96517dce1ebd1bda9d349cd367ecb0ae3"},{"path":"skills/verify-fix/agents/openai.yaml","sha256":"ac35fc4704cde35b6bf103e16a16d0a44f2b9c2671e1634292cf285905cf40f3"},{"path":"skills/vulnerability-writeup/SKILL.md","sha256":"d08582d9963ce3bfbc3fe81b6e85a01e6fe306713d7951bfd8dd2fbc3df75de4"},{"path":"skills/vulnerability-writeup/agents/openai.yaml","sha256":"7987566daac59e3dd6c5211fe020f71fc4c862843c231d10c28a45697d680f9e"},{"path":"skills/vulnerability-writeup/references/report-format.md","sha256":"60568466f7057562d7359dc3a396632c760c147582603896d7e569a77487d0b1"}],"hash_algorithm":"sha256","schema_version":1}
SHA-256: d8f7683d4ed54915958087c1532c15a0eb0e87db1424addea133794979b609cc