cd /news/ai-tools/macos-code-sign-clone-grows-unbounde… · home topics ai-tools article
[ARTICLE · art-45550] src=github.com ↗ pub= topic=ai-tools verified=true sentiment=↓ negative

macOS: Code_sign_clone grows unbounded (62 GB+) across Codex auto-updates

A bug in OpenAI's Codex desktop app for macOS causes a code_sign_clone directory to grow unbounded, consuming over 62 GB of disk space. The directory accumulates due to frequent auto-updates and is never cleaned up, leading to a silent disk space leak. Users can manually delete the directory as a workaround.

read2 min views1 publishedJun 30, 2026
macOS: Code_sign_clone grows unbounded (62 GB+) across Codex auto-updates
Image: source

NotificationsYou must be signed in to change notification settings - Fork 14k

appIssues related to the Codex desktop appIssues related to the Codex desktop app

bugSomething isn't workingSomething isn't working

Description #

Summary #

On macOS, the Codex desktop app (Electron) accumulates a massive code_sign_clone

directory in the system temp folder that is never cleaned up. Over time this can consume 62 GB or more of disk space without the user realizing it.

Environment #

macOS: 26.6 (25G5028f)** Codex version**: 26.608.12217 (build 3722)** Architecture**: Apple Silicon (aarch64)

Location #

/private/var/folders/<hash>/X/com.openai.codex.code_sign_clone

Root Cause #

macOS creates a code signing clone under /private/var/folders/.../X/

for signed Electron apps. When the app auto-updates frequently (as Codex does), macOS retains old signing data but does not aggressively prune it. Because Codex.app is ~1 GB and updates are frequent, this directory grows to tens of gigabytes over weeks of normal use.

Reproduction #

  • Use Codex desktop for several weeks with auto-update enabled.

  • Run: du -sh /private/var/folders/*/X/com.openai.codex.code_sign_clone

  • Observe 10-60+ GB consumed.

Suggested Fix #

  • On app startup or after a successful update, remove or invalidate stale entries in the code_sign_clone directory.
  • Alternatively, reduce the frequency of full app binary replacements during updates (e.g., use delta updates or a stable binary wrapper that loads updated JS bundles without replacing the signed executable).

Workaround #

Users can safely delete the directory:

rm -rf /private/var/folders/*/X/com.openai.codex.code_sign_clone

macOS will regenerate the current version's signing data on next launch (~few hundred MB).

Impact #

This is a silent disk space leak. Users see "Codex: 75 GB" in macOS Storage settings but cannot find where the space is consumed because the path is hidden in system temp folders. Users with smaller SSDs may hit disk-full conditions without understanding the cause.

Metadata #

Metadata #

Assignees

Labels

appIssues related to the Codex desktop appIssues related to the Codex desktop app

bugSomething isn't workingSomething isn't working

Type

Fields

Give feedback

── more in #ai-tools 4 stories · sorted by recency
── more on @openai 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/macos-code-sign-clon…] indexed:0 read:2min 2026-06-30 ·