[gregwebs]

Just ran it on a small repo. It ran for almost an hour and then got interrupted. It drained half my weekly usage on a Pro plan.

  npx codex-security scan .
  [00:00] Preparing scan
  [00:00] Authentication: stored Codex credentials.
  [00:03] Preparing scan
  [01:20] Running scan
  [01:20] Preflight: worker delegation supported (up to 8 worker slots).
  [52:47] Running scan
  codex-security: Could not save the Codex Security scan: Repository HEAD changed while the scan was running. Start a new scan.
  codex-security: Partial output was kept at ...

[brap]

Working as intended

[tomaskafka]

On metrics this either shows as “codex security makes people use us more” or “people are buying extra plans, yay!”

Promotions all around.

[crossroadsguy]

Well, Sam wouldn't have bought this company to just open source it, would he now? ;)

[lukewarm707]

sam believes in Intervene to Prohibit Opensource

[alansaber]

Classic.

[teaearlgraycold]

I plan to hack it to use openrouter and Kimi K3 or GLM 5.2 to keep expenses reasonable.

For context can you share the line count?

[typpo]

No need to hack it, we'll add proper support for this.

[teaearlgraycold]

Excellent. Stuff like this, or LLM SRE automation, are big product spaces for the future.

[st3fan]

Give this a try https://infosec.exchange/@st3fan/117000352530023032

[ymir_e]

FYI: Kimi K3 is relatively expensive on open router API pricing for agentic tasks, or at least that's been my experience playing around with it.

[teaearlgraycold]

They just opened the weights. I expect competition from various providers will drop the price a bit. But you're right. I'd hope a model closer to GLM 5.2's price would be sufficiently useful.

[dannyw]

A license and presumably revshare is required for large scale inference as a service of Kimi K3. There's clearly something going on right now with every router at the same or higher price as the Moonshot list price.

So I wouldn't count on competition if $/mil token is actually set by Moonshot, but I would expect $/tok to drop when there's a more competitive frontier open weight model.

[Tepix]

Where did you get that from? That‘s not what the license says: https://huggingface.co/moonshotai/Kimi-K3/blob/main/LICENSE

The current price is likely a result of the high demand and the high requirements of this model.

[klausa]

Did you actually read the license?

> If the Licensee or any of its affiliates operates a Model as a Service business, and the aggregate revenue of the Licensee and its affiliates exceeds 20 million US dollars (or the equivalent in other currencies) in total over any consecutive 12 months, the Licensee must enter into a separate agreement with Moonshot AI before using the Software or its derivative works for any commercial purpose.

[catgirlinspace]

if you’re hosting it then you have to have an agreement with Moonshot, which presumably includes terms about pricing.

[dangelosaurus]

Oof, that's a bad outcome. Half your weekly usage and a 50-minute scan just to get a HEAD error at the end is not acceptable. --max-cost can help limit estimated spend, but that doesn't fix the underlying problem or give you your quota back. We need to handle a changing checkout and partial results much better. Sorry you ran into this. Please send me an email.

[wwalexander]

Are you generating these responses with an LLM?

[arpinum]

I set --max-cost to 100, it bailed before finishing. Unknown if I would get full results for $105 or $500. Either way I lost $100.

[pferde]

Where are you people getting your money if you can blow it at harebrained experiments like this? This is mind-staggeringly expensive for what it does!

[alasano]

Damn. Just ran it and it used 5 years worth of Pro usage in 5 minutes.

If ya wouldn't mind crediting me a quick 60 months that would be great.

[hellohello2]

Pro is 10$ a month. You get what you pay for lol.

[oefrha]

No, Pro is $100 or $200/mo. Even Plus is $20/mo. Where's this $10/mo Pro plan?

[hellohello2]

Apologies I misremembered and confused Pro with Plus.

[paulddraper]

So it drained $5?

Can’t speak to the results, but the cost isn’t high.