Unused Codex environment with repository access

Last updated Oct 17, 2026 Preview Policies Sprawl & Lifecycle

AI summary

A policy identifies Codex sandboxes with repository access that have never run a task, representing unnecessary access to source code. Remove them from the OpenAI console once the creator confirms they are not needed.

Severity: Medium Sprawl Recommended Preview

What it detects

Detects Codex sandboxes that can reach repositories but have never run a task.

Why it matters

A sandbox nobody uses is standing access to source code for no benefit at all. These accumulate quietly because creating one is cheap and nobody is prompted to clean them up. Remove the environment in the OpenAI console once the creator confirms it is not needed.

The rule

Every ChatGPT Codex Environment where Tasks is less than 1 and Repository Count is greater than 0

In Rencore Governance

Details

Applies to	ChatGPT Codex Environment
Connector	ChatGPT Enterprise
Severity	Medium
Category	Sprawl
Recommended	Yes
Recommended automation	None
License type	Standard

Other policies that check ChatGPT Codex Environment objects:

Shared Codex environment with repository access (High)

Frequently asked questions

What does the unused Codex environment with repository access policy detect?

The Unused Codex environment with repository access policy detects Codex sandboxes that can reach repositories but have never run a task.

Which objects does the unused Codex environment with repository access policy check?

The Unused Codex environment with repository access policy checks ChatGPT Codex Environment objects from the ChatGPT Enterprise inventory and reports each one that matches its rule as a violation.

How severe is a violation of the unused Codex environment with repository access policy?

Violations of the Unused Codex environment with repository access policy have Medium severity. The policy is in the Sprawl category.

Which module includes the unused Codex environment with repository access policy?

The Unused Codex environment with repository access policy comes with the ChatGPT Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.

Was this page helpful?