ispute regarding False Positive Security Identification for macOS Development Project：
What version of the Codex App are you using (From “About Codex” dialog)?
Codex 26.429.61741 (2429)
What subscription do you have?
ChatGPT Pro 200USD/M
What platform is your computer?
MacOS
What issue are you seeing?
I am currently developing a macOS utility designed to automate updates for third-party applications. The software utilizes scripts to identify local applications and map them to their corresponding GitHub repositories to check for the latest releases.
However, my development activity is consistently flagged as a "Security Risk." I would like to clarify that the software merely performs a version comparison between local metadata and GitHub's public Release API. There is no malicious intent, yet it is being treated as a threat.
This misidentification is causing persistent, daily security pop-ups that severely disrupt my workflow. This appears to be a bug in your heuristic analysis or security filtering. I request that you rectify this error, whitelist my research and development activity, and stop these intrusive alerts. Your system has misinterpreted the functional nature of my project.
What steps can reproduce the bug?
Uploaded thread: 019de43f-193c-7733-a5ca-b28feda67044
What is the expected behavior?
I request an end to these persistent security pop-ups, as they are severely hindering my app development workflow.
Additional information
_No response_
3 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
I am writing to report a significant regression regarding security alerts in the latest version. While version 5.4 xhigh exhibited stable behavior with minimal interruptions, version 5.5 xhigh is triggering an excessive number of security pop-ups that have become a major hindrance to my development environment.
My work is conducted entirely locally and primarily involves indexing and filtering local databases to match software metadata. These operations do not involve any network-based attacks or malicious exploits. Your security protocols should focus on preventing external network threats rather than obstructing legitimate, local development tasks.
The current frequency of these alerts is intolerable and disrupts my daily workflow. I request that you investigate the changes made in the 5.5 update, address this over-sensitivity, and provide a way to suppress these false positives for my local development activities.
Thanks for reporting. This will help us tune our classifier.