Security and best-practices scanner for OpenAI Codex CLI plugins. Scores plugins 0-100 and outputs SARIF for CI integration. Sits alongside SonarQube as a domain-specific quality/security gate for the emerging Codex plugin ecosystem.
pip install codex-plugin-scanner
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/devtoolsd/awesome-devtools/pull/142
**Author:** [@internet-dot](https://github.com/internet-dot)
**Created:** 3/31/2026
**Status:** 🔄 Open
**Base:** `main` ← **Head:** `main`
---
### 📝 Commits (1)
- [`cc50158`](https://github.com/devtoolsd/awesome-devtools/commit/cc501586ce4c26c95763df013b815b7a022fc0b5) Add codex-plugin-scanner: security scanner for Codex CLI plugins
### 📊 Changes
**1 file changed** (+1 additions, -0 deletions)
<details>
<summary>View changed files</summary>
📝 `readme.md` (+1 -0)
</details>
### 📄 Description
Adding [codex-plugin-scanner](https://github.com/hashgraph-online/ai-plugin-scanner) to the Testing & Quality section.
Security and best-practices scanner for OpenAI Codex CLI plugins. Scores plugins 0-100 and outputs SARIF for CI integration. Sits alongside SonarQube as a domain-specific quality/security gate for the emerging Codex plugin ecosystem.
```
pip install codex-plugin-scanner
```
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/devtoolsd/awesome-devtools/pull/142
Author: @internet-dot
Created: 3/31/2026
Status: 🔄 Open
Base:
main← Head:main📝 Commits (1)
cc50158Add codex-plugin-scanner: security scanner for Codex CLI plugins📊 Changes
1 file changed (+1 additions, -0 deletions)
View changed files
📝
readme.md(+1 -0)📄 Description
Adding codex-plugin-scanner to the Testing & Quality section.
Security and best-practices scanner for OpenAI Codex CLI plugins. Scores plugins 0-100 and outputs SARIF for CI integration. Sits alongside SonarQube as a domain-specific quality/security gate for the emerging Codex plugin ecosystem.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.