diff --git a/my-tools/run_web_product_migration.py b/my-tools/run_web_product_migration.py
index a098b3bb6..584384fb5 100644
--- a/my-tools/run_web_product_migration.py
+++ b/my-tools/run_web_product_migration.py
@@ -146,7 +146,7 @@ def run_task(task: dict, heartbeat_seconds: float) -> tuple[int, bool]:
     log_path = LOG_ROOT / f"{task['id']}.codex.jsonl"
     LOG_ROOT.mkdir(parents=True, exist_ok=True)
     command = [
-        "codex", "exec", "--approve-for-me",
+        "codex", "exec", "--dangerously-bypass-approvals-and-sandbox",
         "--ephemeral", "--cd", str(ROOT), "--json", "-",
     ]
     with log_path.open("w", encoding="utf-8") as log: