Hi,
so I was tryingto use the Codex Security tab in Codex Cloud, but pretty much nothing works. All I get are invalid API URL messages as soon as I open the page. Did I lose access or something? Because I had a bunch of scans running before.
Failed to load repositories: Invalid URL (GET /api/aardvark/scan-findings/list-accessible-repos)
Failed to load scan configurations: Invalid URL (GET /api/aardvark/scan_configurations)
Failed to load repositories: Invalid URL (GET /api/aardvark/scan-findings/list-accessible-repos)
Failed to load scan configurations: Invalid URL (GET /api/aardvark/scan_configurations)
Failed to load repositories: Invalid URL (GET /api/aardvark/scan-findings/list-accessible-repos)
Failed to load scan configurations: Invalid URL (GET /api/aardvark/scan_configurations)
Failed to load repositories: Invalid URL (GET /api/aardvark/scan-findings/list-accessible-repos)
Failed to load scan configurations: Invalid URL (GET /api/aardvark/scan_configurations)
The repeated Invalid URL errors on /api/aardvark/... look more like the page isn’t correctly building or reaching its backend routes.
In cases of access issues, I’d usually expect something like a 401/403 instead.
Could you share when this started, whether it happens across all repos, and any request ID or network error details from one of those failed calls? That should help narrow down whether this is a broader Codex Security issue or something session-specific.
I don!t think it’s session specific, as I just now opened it on a different PC in a different network. I just discovered it today, because of the GPT 5.4-Cyber announcement. It doesn’t even load any repos, as soon as i click the Security tab in Codex Cloud i get these error popups, when i click on the Scans tab in there I get:
Failed to load repositories: Invalid URL (GET /api/aardvark/scan-findings/list-accessible-repos)
Failed to load scan configurations: Invalid URL (GET /api/aardvark/scan_configurations)
Failed to load repositories: Invalid URL (GET /api/aardvark/scan-findings/list-accessible-repos)
Failed to load scan configurations: Invalid URL (GET /api/aardvark/scan_configurations)
While writing this, I opened the same page in Incognito and got a 404 instead. After that, in my normal browser too, the Security tab was gone and had been replaced by the App tab. So I guess I don’t have access anymore?
I also captured a HAR while reproducing. In that HAR, the old /codex/cloud/security/scans?sev=critical%2Chigh&refresh_account=true URL still returned the main Codex HTML shell with HTTP 200, but a few seconds later the client logged 404 Page Shown for that same route. I do not see any actual /api/aardvark/... network requests in that HAR during this reproduction.
Please avoid quoting my replies from other topics, as it can create confusion for both myself and others.
The original poster has already been contacted by OpenAI Support and has received a response. Since I am not an OpenAI employee, I defer to their team once they are engaged.
If you need to contact OpenAI Support regarding your own issue, please refer to the following:
