ChatGPT Codex Environment

Last updated Oct 17, 2026 Preview Inventory

AI summary

A ChatGPT Codex Environment represents a sandbox for running Codex tasks, with configurable access to source repositories. Rencore tracks 25 properties about each environment including its creator, sharing status, repository reach, and usage. You can use built-in segments and policies to identify risky configurations, such as environments that are shared but have repository access, or unused environments that still have standing repository access.

Codex sandboxes, the repositories they reach and how widely they are shared

Part of the ChatGPT Enterprise inventory.

In Rencore Governance

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Daily	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

25 properties in 8 groups. Open a group to see its properties.

Name and identity 3

Property	Type	Automation placeholder
Description	String	`{{ChatGPTCodexEnvironment.Description}}`
Display Name	String	`{{ChatGPTCodexEnvironment.DisplayName}}`
ID	String	`{{ChatGPTCodexEnvironment.Id}}`

Organization and location 3

Property	Type	Description	Automation placeholder
Environment Variable Keys	String	The names of the environment variables configured. Their values are never read or stored.	`{{ChatGPTCodexEnvironment.EnvVarKeys}}`
Workspace	ChatGPT Workspace		`{{ChatGPTCodexEnvironment.Workspace}}`
Workspace Name	String		`{{ChatGPTCodexEnvironment.WorkspaceName}}`

Activity and usage 3

Property	Type	Description	Automation placeholder
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	`{{ChatGPTCodexEnvironment.LastModifiedTime}}`
Repository Count	Int32		`{{ChatGPTCodexEnvironment.RepositoryCount}}`
Tasks	Int32	How many tasks have run here. Zero means a configured sandbox nobody uses, which is standing repository access for nothing.	`{{ChatGPTCodexEnvironment.TaskCount}}`

Dates and scanning 2

Property	Type	Description	Automation placeholder
Created At	DateTime		`{{ChatGPTCodexEnvironment.CreatedAt}}`
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	`{{ChatGPTCodexEnvironment.CreatedTime}}`

Property	Type	Description	Automation placeholder
M365 Creator	User		`{{ChatGPTCodexEnvironment.CreatedByM365User}}`
M365 Creator Name	String		`{{ChatGPTCodexEnvironment.CreatedByM365UserName}}`
Creator	ChatGPT user		`{{ChatGPTCodexEnvironment.CreatedByUser}}`
Creator Name	String		`{{ChatGPTCodexEnvironment.CreatedByUserName}}`
Is Shared	Boolean	True when the sandbox is reachable by somebody other than its creator.	`{{ChatGPTCodexEnvironment.IsShared}}`
Share Settings	String	How widely the sandbox is shared. Allowed values: private, shared, workspace.	`{{ChatGPTCodexEnvironment.ShareSettings}}`

Security and compliance 4

Property	Type	Description	Automation placeholder
Key	String	Internal.	`{{ChatGPTCodexEnvironment.ApiKeyEncrypted}}`
Risk Score	Int32	Stores risk score	`{{ChatGPTCodexEnvironment.RiskScore}}`
Risk Score Update	DateTime	Stores risk score update	`{{ChatGPTCodexEnvironment.RiskScoreLastUpdate}}`
Risk Score Value	String	Stores risk score value like Low_Low	`{{ChatGPTCodexEnvironment.RiskScoreValue}}`

Settings 2

Property	Type	Description	Automation placeholder
Has Setup Script	Boolean	Whether the environment runs a setup script before a task starts.	`{{ChatGPTCodexEnvironment.HasSetupScript}}`
Pinned	Boolean		`{{ChatGPTCodexEnvironment.IsPinned}}`

Other properties 2

Property	Type	Description	Automation placeholder
Repositories	String	The repositories this sandbox can reach, by URL and branch. Compare the hosts and orgs against the allowed-repositories custom property.	`{{ChatGPTCodexEnvironment.Repositories}}`
Repository Orgs	String	The distinct hosts and organisations the repositories belong to, so an environment reaching outside the approved set can be filtered.	`{{ChatGPTCodexEnvironment.RepositoryOrgs}}`

Relations

Relation	Connector	Description
ChatGPT Codex task	ChatGPT Enterprise	Codex cloud tasks, by creator, source and environment
ChatGPT user	ChatGPT Enterprise	Every user in the connected ChatGPT workspace, with role, seat, spend and the Entra ID join
ChatGPT Workspace	ChatGPT Enterprise	The connected ChatGPT Enterprise workspace, its granted scopes and its coverage gaps
User	Microsoft 365	All users registered in your tenant (internal, external)

Segments

Segment	Description
Codex environments with repository access	Codex sandboxes wired to at least one repository. To find the ones outside an approved list, maintain the allowed organisations as a custom property and compare against Repository Orgs.
Shared Codex environments	Codex sandboxes reachable by somebody other than their creator
Unused Codex environments	Codex sandboxes no task has ever run in, which is standing repository access for nothing

Actions

This object does currently not have any actions.

Policy	Severity	Description
Shared Codex environment with repository access	High	Detects Codex sandboxes that are shared and can reach source repositories
Unused Codex environment with repository access	Medium	Detects Codex sandboxes that can reach repositories but have never run a task

Frequently asked questions

What is the ChatGPT Codex Environment object in Rencore Governance?

Codex sandboxes, the repositories they reach and how widely they are shared. ChatGPT Codex Environment is an object type in the ChatGPT Enterprise inventory of Rencore Governance.

Which properties does Rencore Governance collect for ChatGPT Codex Environment?

Rencore Governance collects 25 properties for ChatGPT Codex Environment, such as Key, Created At, M365 Creator and 22 more.

Which policies check ChatGPT Codex Environment objects?

2 built-in policies check ChatGPT Codex Environment objects, such as Shared Codex environment with repository access and Unused Codex environment with repository access.

How often is ChatGPT Codex Environment scanned?

By default daily. You can change the scan interval of ChatGPT Codex Environment objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the ChatGPT Enterprise connector?

The ChatGPT Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.

Was this page helpful?