I tried the Codex security scanning tool and it found a bunch of stuff, which a non-senior-dev would think oh wow, such an impressive tool!
Not a single thing it found was actually exploitable. Was all minor stuff like "legacy database dump found in git history" - the db dump in question is a test stub file 🙄
There was only one issue that might maybe be a problem, but it was already flagged with traditional tooling and already had a task to address it.
Troy
npub1wm…kl60d
2026-07-29 16:11:22 UTC
Author Public Key
npub1wmcxx24gfa8lkhfsd23rgq3tnazgvjfh2enxs3g6rjrvm8xrr6xqekl60dSeen on
wss://relay.momostr.pinkPublished at
2026-07-29 16:11:22 UTCEvent JSON
{
"id": "4d7140e4f43a2b1052c87643e0e367e26ffc741cb0774df8e547c62e09789756",
"pubkey": "76f0632aa84f4ffb5d306aa234022b9f44864937566668451a1c86cd9cc31e8c",
"created_at": 1785341482,
"kind": 1,
"tags": [
[
"proxy",
"https://opencoaster.net/@troy/117004139401442920",
"web"
],
[
"proxy",
"https://opencoaster.net/users/troy/statuses/117004139401442920",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://opencoaster.net/users/troy/statuses/117004139401442920",
"pink.momostr"
],
[
"-"
]
],
"content": "I tried the Codex security scanning tool and it found a bunch of stuff, which a non-senior-dev would think oh wow, such an impressive tool!\n\nNot a single thing it found was actually exploitable. Was all minor stuff like \"legacy database dump found in git history\" - the db dump in question is a test stub file 🙄\n\nThere was only one issue that might maybe be a problem, but it was already flagged with traditional tooling and already had a task to address it.",
"sig": "afc85dba880a304a1e48efbd4108e947b6fb319e8537dba000c92117248b1a466728b05f7b8a80817edd36e04be4f74553a55e038cdc0c4ef772205de3001ab8"
}