codex-action/action.yml at main · icoretech/codex-action · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
name: 'Codex Action'
description: 'Run OpenAI Codex CLI non-interactively in GitHub Actions workflows'
author: 'iCoreTech, Inc.'

branding:
  icon: 'terminal'
  color: 'green'

inputs:
  prompt:
    description: 'Instructions for Codex (e.g., "Summarize these changes for operators")'
    required: true
  input_text:
    description: 'Data to process (e.g., changelog content). Appended after the prompt with a separator.'
    required: false
    default: ''
  openai_api_key:
    description: 'OpenAI API key. Mutually exclusive with codex_config.'
    required: false
    default: ''
  codex_config:
    description: 'Base64-encoded auth.json from a prior device-auth session. Mutually exclusive with openai_api_key.'
    required: false
    default: ''
  codex_config_toml:
    description: 'Base64-encoded config.toml with Codex preferences (model, personality, etc.). Optional, works with either auth method.'
    required: false
    default: ''
  image_version:
    description: 'codex-docker image version tag'
    required: false
    # renovate: datasource=docker depName=ghcr.io/icoretech/codex-docker
    default: '0.144.1'
  model:
    description: 'Model override (passed to codex exec --model)'
    required: false
    default: ''
  reasoning_effort:
    description: 'Reasoning effort level (minimal, low, medium, high, xhigh). Passed via model_reasoning_effort config override.'
    required: false
    default: ''
  network_access:
    description: 'Allow Codex to make network requests (curl, wget, etc.) during execution. When false (default), a prompt-level policy instructs the model not to use networking tools.'
    required: false
    default: 'false'
  sandbox:
    description: 'Sandbox mode for Codex execution. Options: full-auto (default, uses bubblewrap), danger-full-access (disables sandbox — recommended for CI/Docker where the container is already isolated).'
    required: false
    default: 'full-auto'
  quiet:
    description: 'Suppress verbose Codex output (tool calls, grep results, file reads) from workflow logs. Prevents source code leakage in logs. Set to false for debugging.'
    required: false
    default: 'true'
  timeout:
    description: 'Max seconds for codex execution (default: 300)'
    required: false
    default: '300'

outputs:
  result:
    description: 'Text output from Codex'
    value: ${{ steps.codex.outputs.result }}

runs:
  using: 'composite'
  steps:
    - name: Run Codex
      id: codex
      shell: bash
      env:
        INPUT_PROMPT: ${{ inputs.prompt }}
        INPUT_INPUT_TEXT: ${{ inputs.input_text }}
        INPUT_OPENAI_API_KEY: ${{ inputs.openai_api_key }}
        INPUT_CODEX_CONFIG: ${{ inputs.codex_config }}
        INPUT_CODEX_CONFIG_TOML: ${{ inputs.codex_config_toml }}
        INPUT_IMAGE_VERSION: ${{ inputs.image_version }}
        INPUT_MODEL: ${{ inputs.model }}
        INPUT_REASONING_EFFORT: ${{ inputs.reasoning_effort }}
        INPUT_NETWORK_ACCESS: ${{ inputs.network_access }}
        INPUT_SANDBOX: ${{ inputs.sandbox }}
        INPUT_QUIET: ${{ inputs.quiet }}
        INPUT_TIMEOUT: ${{ inputs.timeout }}
      run: ${{ github.action_path }}/entrypoint.sh