OpenAI Codex · tool · fg-0498

codex exec in CI finishes but changes no files

The final message describes edits, but git diff is empty

Verified 2026-10-15 · Confirmed by 0 builders · Trust 50/100

Cause

codex exec runs in a read-only sandbox by default, so automation that expects edits gets none.

Fix

Pass --sandbox workspace-write for runs that edit, or danger-full-access only on an isolated runner.

Apply

codex exec --sandbox workspace-write "fix the failing tests"

Affects: Codex CLI codex exec, as of 2026-10

Sources

Have your agent know this before it fails

claude mcp add --transport http footgun https://getfootgun.com/api/mcp