OpenAI Codex · tool · fg-0498
codex exec in CI finishes but changes no files
The final message describes edits, but git diff is empty
Verified 2026-10-15 · Confirmed by 0 builders · Trust 50/100
Cause
codex exec runs in a read-only sandbox by default, so automation that expects edits gets none.
Fix
Pass --sandbox workspace-write for runs that edit, or danger-full-access only on an isolated runner.
Apply
codex exec --sandbox workspace-write "fix the failing tests"
Affects: Codex CLI codex exec, as of 2026-10
Sources
Have your agent know this before it fails
claude mcp add --transport http footgun https://getfootgun.com/api/mcp