Codex Security 0.6.0 adds vendor report imports and a built-in severity rubric

Codex Security 0.6.0 imports reports from other scanners, can suggest owners for findings and adds hosted remediation commands. Severity classification now uses a built-in rubric and three independent reviews.

Who is affected:

Teams that run Codex Security from its CLI, SDK or GitHub Action.

What to do:

Update @openai/codex-security to 0.6.0 to get the new severity rubric.