About
OpenQodex reviews your code change before you push it. It runs on your machine, from Claude Code, Codex, Cursor or Cline, or from your terminal.
How it works
First, it runs the scanners that fit the files you changed. OpenQodex has 22 built-in scanners, such as gitleaks, semgrep and osv-scanner, and keeps their findings on the lines you changed.
Then it starts reviewers: separate Claude Code or Codex processes on your own login. By default, the agent that wrote the code does not review it.
The reviewer must raise or drop every scanner finding. Scripts check that it answered every finding and was given every changed line. Otherwise the report says "Review incomplete" and exits with code 2.
It writes HTML, Markdown, JSON and SARIF reports and prints a receipt with the verdict.
The push gate and git pre-push hook that init installs warn by default. They block only when you set a severity.
Privacy
OpenQodex needs no account or API key of its own and collects no usage data. The reviewer sends your change to the model service of your Claude Code or Codex login.
Requirements
macOS or Linux, Node 22 or newer, and git. For a full review, Claude Code or Codex installed and logged in.
Free and open source under Apache 2.0, made by Qodex.
Try it: npx openqodex demo
Install: npx openqodex init