keychain errors when running /review

Resolved 💬 3 comments Opened Dec 16, 2025 by getaaron Closed Dec 16, 2025

What version of Codex is running?

codex-cli 0.73.0

What subscription do you have?

AzureAI

Which model were you using?

gpt-5.1-codex-max high

What platform is your computer?

Linux 6.14.0-35-generic x86_64 x86_64

What issue are you seeing?

When I try to run /review and then select a review type (e.g. uncommitted changes) i get some cryptic keychain error and the model spins until giving up saying it can't complete the review due to a keychain error. When I ask codex for help it usually says it's something wrong with a macOS keychain but this is a linux machine.

I believe but am not sure that this started upgrading after an older version (0.65 maybe?)

$ codex --dangerously-bypass-approvals-and-sandbox
╭──────────────────────────────────────────────────────╮
│ >_ OpenAI Codex (v0.73.0)                            │
│                                                      │
│ model:     gpt-5.1-codex-max high   /model to change │
│ directory: ~/src/git/foo                             │
╰──────────────────────────────────────────────────────╯

  Tip: You can run any shell command from Codex using ! (e.g. !ls)

>> Code review started: current changes <<

• Ran cd /home/someone/src/git/foo && git status --short
  └ /usr/bin/keychain: 362: cannot create /home/someone/.keychain/hostname-lockf.737071: Permission denied

• I’m considering that the keychain should be non-login and non-interactive. Maybe it got triggered from .bashrc
  before for non-interactive sessions? I'm not entirely sure if the earlier call defaulted to true for login. Wait, I
  might need to explicitly set "login": false and try again. It's a bit of a puzzle, but I'm determined to get it
  right!

What steps can reproduce the bug?

  • Install codex
  • Have a .keychain directory in home directory
  • Run codex in a git repo
  • /review and request a review against current changes

What is the expected behavior?

A code review.

Additional information

If I rename the .keychain directory when I run the review I get

  └ mkdir: cannot create directory '/home/someone/.keychain': Permission denied
     * Error: can't create /home/someone/.keychain

instead.

I am really unsure why codex even needs to look at the .keychain directory to conduct a code review!

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗