macOS: Code_sign_clone grows unbounded (62 GB+) across Codex auto-updates

ValentineC1 pts0 comments

macOS: code_sign_clone grows unbounded (62 GB+) across Codex auto-updates · Issue #27536 · openai/codex · GitHub

//voltron/issues_fragments/issue_layout" data-turbo-transient="true" />

Skip to content

Search or jump to...

Search code, repositories, users, issues, pull requests...

-->

Search

Clear

Search syntax tips

Provide feedback

--><br>We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Cancel

Submit feedback

Saved searches

Use saved searches to filter your results more quickly

-->

Name

Query

To see all available qualifiers, see our documentation.

Cancel

Create saved search

Sign in

//voltron/issues_fragments/issue_layout;ref_cta:Sign up;ref_loc:header logged out"}"<br>Sign up

Appearance settings

Resetting focus

You signed in with another tab or window. Reload to refresh your session.<br>You signed out in another tab or window. Reload to refresh your session.<br>You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

{{ message }}

Uh oh!

There was an error while loading. Please reload this page.

openai

codex

Public

Notifications<br>You must be signed in to change notification settings

Fork<br>14k

Star<br>94.6k

macOS: code_sign_clone grows unbounded (62 GB+) across Codex auto-updates #27536

New issue<br>Copy link

New issue<br>Copy link

Closed

Closed<br>macOS: code_sign_clone grows unbounded (62 GB+) across Codex auto-updates#27536

Copy link

Labels<br>appIssues related to the Codex desktop appIssues related to the Codex desktop appbugSomething isn't workingSomething isn't working

Description

VincentAdamNemessisX<br>opened on Jun 11, 2026

Issue body actions

Summary

On macOS, the Codex desktop app (Electron) accumulates a massive code_sign_clone directory in the system temp folder that is never cleaned up. Over time this can consume 62 GB or more of disk space without the user realizing it.

Environment

macOS : 26.6 (25G5028f)

Codex version : 26.608.12217 (build 3722)

Architecture : Apple Silicon (aarch64)

Location

/X/com.openai.codex.code_sign_clone">/private/var/folders//X/com.openai.codex.code_sign_clone

Root Cause

macOS creates a code signing clone under /private/var/folders/.../X/ for signed Electron apps. When the app auto-updates frequently (as Codex does), macOS retains old signing data but does not aggressively prune it. Because Codex.app is ~1 GB and updates are frequent, this directory grows to tens of gigabytes over weeks of normal use.

Reproduction

Use Codex desktop for several weeks with auto-update enabled.

Run: du -sh /private/var/folders/*/X/com.openai.codex.code_sign_clone

Observe 10-60+ GB consumed.

Suggested Fix

On app startup or after a successful update, remove or invalidate stale entries in the code_sign_clone directory.

Alternatively, reduce the frequency of full app binary replacements during updates (e.g., use delta updates or a stable binary wrapper that loads updated JS bundles without replacing the signed executable).

Workaround

Users can safely delete the directory:

rm -rf /private/var/folders/*/X/com.openai.codex.code_sign_clone

macOS will regenerate the current version's signing data on next launch (~few hundred MB).

Impact

This is a silent disk space leak. Users see "Codex: 75 GB" in macOS Storage settings but cannot find where the space is consumed because the path is hidden in system temp folders. Users with smaller SSDs may hit disk-full conditions without understanding the cause.

Reactions are currently unavailable

Metadata<br>Metadata<br>Assignees

No one assigned

Labels

appIssues related to the Codex desktop appIssues related to the Codex desktop appbugSomething isn't workingSomething isn't working

Type

No type

Fields<br>Give feedback

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

You can’t perform that action at this time.

codex macos code_sign_clone updates auto openai

Related Articles