Provide the ability to allow workspace-write to access ./.codex

Resolved 💬 4 comments Opened Mar 11, 2026 by kendonB Closed Mar 17, 2026

💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

What variant of Codex are you using?

CLI

What feature would you like to see?

My understanding is that the only way to allow the agent to access the local repo ./.codex/ is to switch on danger mode. There does not seem to be any way to allow workspace-write to write and edit the local repo ./.codex. This would be especially useful for developing complex skills with many scripts. Even allowing ./.codex/skills to be edited would be enough.

Additional information

_No response_

View original on GitHub ↗

4 Comments

github-actions[bot] contributor · 5 months ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

#14338

Powered by Codex Action

viyatb-oai contributor · 5 months ago

you can add

[sandbox_workspace_write]
writable_roots = [
  "/Users/<user>/.codex/",
...
]

to enable writes to .codex if you really need to. We won't support this out of box because it allows the model to edit its own configuration and bypass the sandbox restrictions.

kendonB · 5 months ago

@viyatb-oai this was poorly documented enough that your frontier model was unaware this was possible. Recommend updating docs or the system prompt accordingly.

kendonB · 5 months ago

@viyatb-oai You also seem to have misunderstood my issue and responded as if I meant the central .codex folder