False Positive Alert: Heuristic Improvements Needed for Public GitHub Data Extraction Flagged as Intrusion

Open 💬 1 comment Opened May 19, 2026 by Accademia

What version of the Codex App are you using (From “About Codex” dialog)?

26.513.31313 (2867)

What subscription do you have?

Pro 200USD/M

What platform is your computer?

MacOS

What issue are you seeing?

There is a bug in your logic for determining network intrusion risks. I noticed that any task involving the download of a website database is automatically flagged as an intrusion. This is rigid and incorrect.

My project involves reading GitHub's official, publicly available website database to compile statistics on the number of Mac apps and other metrics. For websites like GitHub, their source code repository databases are inherently public and downloadable, specifically allowing third-party developers to analyze the characteristics of current open-source projects.

However, this process is being misidentified by your system as a website intrusion. This is a false positive. Your system should, at the very least, implement a whitelist or other heuristic methods to prevent this kind of misjudgment.

Feedback ID: 019e20fb-2585-70c2-9205-8e76876ade32

What steps can reproduce the bug?

Feedback ID: 019e20fb-2585-70c2-9205-8e76876ade32

What is the expected behavior?

_No response_

Additional information

_No response_

View original on GitHub ↗

This issue has 1 comment on GitHub. Read the full discussion on GitHub ↗