Codex

Redact secrets from your Codex agents and prevent them from leaking into logs.

Prerequisite

Install the Codex CLI to get the codex command.
$ npm install -g @openai/codex
$ codex --version

1. Install

Get the Dotenvx CLI.

$ curl -sfS https://dotenvx.sh | sh

2. Add your secrets

Add a secret to your .env file.
$ echo "HELLO=World" > .env

3. Run Codex with redaction

Run Codex with your real secrets while redacting them from its output.
$ dotenvx run --redact -- codex exec 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --skip-git-repo-check
Hello [REDACTED]