From 2b3f5023fe8ff92f1e05f5753b1fc5869df4bd97 Mon Sep 17 00:00:00 2001 From: Will Pfleger Date: Fri, 9 Oct 2026 16:58:00 -0400 Subject: [PATCH] chore(ci): run Codex security review on gpt-6.1-sol (#8228) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 🤖 Switches the Codex security review from `gpt-5.6-sol` to `gpt-6.1-sol`. Reasoning effort stays at `high`. - `CODEX_MODEL` changes in both the review job and the job that posts the comment, so the comment's `Model:` line stays accurate. - `codex-version` goes from `0.150.1` to `0.161.0`. That's the first Codex CLI release with GPT-6.1 Sol in its bundled model catalog ([openai/codex#49318](https://github.com/openai/codex/pull/49318)). Both `@openai/codex` and `@openai/codex-responses-api-proxy` are published at that version. - `gpt-6.1-sol` is the model ID listed on the [OpenAI models page](https://developers.openai.com/api/docs/models/gpt-6.1-sol). It supports `high` effort through the Responses API. The workflow runs on `pull_request_target`, so it uses the copy on the base branch. This PR's own review still runs the old model, and the new one takes effect on the first review after merge. Signed-off-by: Will Pfleger Co-authored-by: Paul <4a1bfa0013bc6d14a8d600d8bf6392efefbd2a26ac3c96c9b2a106b0d12297ca@buzz.block.builderlab.xyz> --- .github/scripts/codex-security-review.test.js | 2 +- .github/workflows/codex-security-review.yml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/scripts/codex-security-review.test.js b/.github/scripts/codex-security-review.test.js index 7ae3f852c3..3d491af6c7 100644 --- a/.github/scripts/codex-security-review.test.js +++ b/.github/scripts/codex-security-review.test.js @@ -203,7 +203,7 @@ const NO_FINDINGS_REVIEW = { async function postReview(state, review = NO_FINDINGS_REVIEW) { const environment = { - CODEX_MODEL: "gpt-5.6-sol", + CODEX_MODEL: "gpt-6.1-sol", GITHUB_REPOSITORY: "block/buzz", GITHUB_RUN_ID: "1234", GITHUB_SERVER_URL: "https://github.com", diff --git a/.github/workflows/codex-security-review.yml b/.github/workflows/codex-security-review.yml index eb6d01bf6d..b7966d2b1b 100644 --- a/.github/workflows/codex-security-review.yml +++ b/.github/workflows/codex-security-review.yml @@ -220,7 +220,7 @@ jobs: permissions: contents: read env: - CODEX_MODEL: gpt-5.6-sol + CODEX_MODEL: gpt-6.1-sol CODEX_REASONING_EFFORT: high CODEX_REVIEW_API_KEY_PRESENT: ${{ secrets.CODEX_REVIEW_API_KEY != '' }} REVIEW_CONTEXT: review-context @@ -303,7 +303,7 @@ jobs: ACTIONS_ID_TOKEN_REQUEST_URL: '' with: openai-api-key: ${{ secrets.CODEX_REVIEW_API_KEY }} - codex-version: '0.150.1' + codex-version: '0.161.0' model: ${{ env.CODEX_MODEL }} codex-args: '["-c","model_reasoning_effort=${{ env.CODEX_REASONING_EFFORT }}"]' # The trusted authorization job already required repo write access for the @@ -508,7 +508,7 @@ jobs: contents: read pull-requests: write env: - CODEX_MODEL: gpt-5.6-sol + CODEX_MODEL: gpt-6.1-sol REVIEW_JSON: ${{ needs.security-review.outputs.review_json }} REVIEW_PR_NUMBER: ${{ needs.prepare-review.outputs.pr_number }} REVIEW_TRIGGER_ACTOR: ${{ needs.prepare-review.outputs.trigger_actor }}