CDX-CFG-027: Invalid Windows Sandbox Value - Codex CLI

Summary

• Rule ID: CDX-CFG-027
• Severity: LOW
• Category: Codex CLI
• Normative Level: SHOULD
• Auto-Fix: Yes (unsafe)
• Verified On: 2026-06-04

Applicability

• Tool: codex
• Version Range: unspecified
• Spec Revision: unspecified

Evidence Sources

• https://github.com/openai/codex/blob/rust-v0.137.0/codex-rs/core/config.schema.json

Test Coverage Metadata

• Unit tests: true
• Fixture tests: false
• E2E tests: false

Examples

The following examples demonstrate what triggers this rule and how to fix it.

Invalid

[windows]
sandbox = "docker"

Valid

[windows]
sandbox = "elevated"