[uk ai resilience] UK AI Open Code Risk & Resilience Governance — 2026-09-28

[github-actions[bot]]

Executive summary

UK AI Open Code Risk & Resilience Governance review of github/gh-aw, 7-day recent-change lookback (since 2026-09-21T15:37:05Z): 139 commits (91 by Copilot, 43 by github-actions[bot] — heavy automation-driven velocity), 57 security-signal commits, 64 open security issues, 277 open code-scanning alerts, 0 open secret-scanning alerts.

Governance verdict: the classification → control-verification → risk-scoring → remediation loop is largely functioning — the vast majority of currently open code-scanning alerts (259 of 277, ~93%) already have matching [uk-ai-resilience] tracking issues from prior runs, and no secrets are exposed. However, this run identified 2 newly-surfaced, untracked CodeQL alerts in files touched today (2026-09-28) by the automated commit stream, plus one systemic ownership gap (no CODEOWNERS) that continues to depress detectability/ownership confidence across all findings. No repository-hiding or concealment action is recommended anywhere in this review, consistent with guidance.

Note on this run: the three governance sub-agents (asset-tier-classifier, control-verifier, ai-risk-scorer) were unavailable this run (model-access error, retried once per guardrail). Analysis below was compiled directly from precomputed evidence with equivalent rigor; confidence is noted per finding.

---

Asset graph summary (recent-change scoped)

Segments, runtime areas, and dependencies touched in the lookback window

Segment	Evidence	Runtime area affected
pkg/workflow/create_code_scanning_alert.go	Touched 2026-09-28 (commit 5fe849d and prior in-window)	SARIF upload job / GitHub App token minting for security-events:write
pkg/workflow/github_app_requirements.go	Touched 2026-09-28	Webhook-event/trigger normalization for GitHub App manifest generation
pkg/cli/project_command.go	Security-signal history	GraphQL query construction (project board CLI commands)
pkg/cli, pkg/workflow (broad)	57 security-signal commits incl. actor-authorization fix (#63492), repo-memory auth fix (#63497), safe-outputs-app-token fix (#63490), SARIF workflow-call dependency fix (#63495), forked-repo checkout guard (#63011)	Actions trigger/token-minting, checkout credential handling, safe-outputs pipeline
.github/workflows/*.lock.yml (100+ compiled workflows)	254 npm/uv-pip non-determinism alerts	GitHub Actions runners executing compiled agentic workflows
Dockerfile (root)	FROM alpine:3.24 confirmed unpinned by SHA	Container build supply chain
.github/workflows/format-and-commit.yml	actions/setup-node@... missing explicit node-version	CI formatting/commit automation
scripts/ensure-docs-slide-pdf.js	Untrusted network data written to file (js/http-to-file-access)	Docs build pipeline
MCP gateway/tooling generators (pkg/workflow/mcp_*.go)	Allocation-overflow alert class recurring across sibling files	MCP config/setup generation

Ownership signals: no .github/CODEOWNERS exists (confirmed absent on disk). Human maintainers appearing on security-signal commits: pelikhan, David Slater, Landon Cox; bulk of window volume is bot/agent-authored (Copilot, github-actions[bot], dependabot[bot]) with human co-author sign-off on security fixes.

---

Tier classification table

Tier assignments for this run's high-priority changed areas

#	Area	Tier	Rationale
1	pkg/workflow/create_code_scanning_alert.go:110 (alerts #944, #945 — allocation-size-overflow)	C — Restricted Pending Review	Newly surfaced in file touched today; no tracking issue yet; feeds the security-events upload path itself
2	pkg/workflow/github_app_requirements.go:151 (alert #941 — bad-redirect-check)	B — Open With Conditions	Matches the well-established recurring false-positive pattern (#57472/#59491/#54037: HasPrefix(name, "/") string-prefix checks misclassified as redirect validation) but is itself untracked as an individual alert
3	Missing .github/CODEOWNERS (#61637, still open)	B — Open With Conditions	Systemic — depresses ownership-confidence scoring for every other finding in this report
4	npm/uv-pip install non-determinism, 254 alerts (#61636, tracked)	B — Open With Conditions	High volume but low individual severity; single umbrella remediation path exists
5	Dockerfile alpine:3.24 unpinned (#61166, tracked)	B — Open With Conditions	Confirmed still present; simple SHA-pin fix available
6	format-and-commit.yml missing node-version pin (#61378, tracked)	B — Open With Conditions	Confirmed still present
7	pkg/cli/project_command.go GraphQL Sprintf injection (#52749, tracked)	B — Open With Conditions	Awaiting triage confirmation of constant-only interpolation
8	scripts/ensure-docs-slide-pdf.js untrusted-data-to-file (#53737/#62692, tracked)	C — Restricted Pending Review	Recurring across two prior tracking issues without closure

---

Control verification gaps

Control domain	Status	Gap
Ownership	⚠️ Gap	No CODEOWNERS for security-sensitive pkg/cli/pkg/workflow paths (#61637 open)
SDLC	✅ Adequate	CodeQL + custom pr-action rules run on every push; 57 security-signal commits show active remediation cadence
Dependency	⚠️ Gap	254 unpinned npm/pip installs across compiled workflows; Dockerfile base image unpinned
Secret exposure	✅ Clean	0 open secret-scanning alerts
Runtime observability	✅ Adequate	Code-scanning alert backlog is actively triaged into tracking issues (93% coverage) each run
Recovery / patch readiness	⚠️ Partial	Recurring alert classes (bad-redirect-check, allocation-overflow) resurface faster than root-cause fixes land — indicates patch velocity lags dismissal-hygiene tracking

---

Risk-scoring table and rationale

Finding	Exposure amp.	Patchability	Detectability	Op. fragility	Ownership conf.	Tier
Alerts #944/#945 (new)	Low–Med	High	Med (untracked)	Low	Med	C
Alert #941 (new)	Low	High	Med (untracked, likely FP)	Low	Med	B
Missing CODEOWNERS	Med (systemic)	High	High	Med	Low	B

Rationale: none of the new findings are exploit-imminent (compiler-internal Go code, not attacker-reachable network surface), but leaving them untracked breaks the audit trail this governance loop depends on, and the missing CODEOWNERS file compounds every other ownership-confidence score in the backlog.

---

Remediation queue with SLAs

Priority	Item	Action	SLA
High	Alerts #944/#945 in create_code_scanning_alert.go:110	Guard len(tokenMintSteps)+len(uploadSteps) with bounds check or widen to int64 before make([]string, 0, ...); open/attach tracking issue	14 days
High	Alert #941 in github_app_requirements.go:151	Triage against known FP pattern (#57472); if FP, extend shared isSafeRelativePath-style helper; if genuine, add ////\ rejection	14 days
Medium	Missing CODEOWNERS	Add .github/CODEOWNERS covering pkg/cli/, pkg/workflow/	30 days (per #61637)
Medium	254 npm/pip non-determinism alerts	Land shared lockfile/version-pin remediation (#61636)	30 days
Low	Dockerfile alpine:3.24 unpinned	SHA-pin base image (#61166)	30 days

---

Exception register

None. No temporary exceptions requested or granted in this run; no repository-hiding recommended.

---

Operational metrics baseline

Metric	Value
MTTR proxy (tracking-issue coverage of open alerts)	259/277 ≈ 93% tracked
Ownership coverage	0% — no CODEOWNERS file exists
Unsupported/unpinned dependency ratio	254/277 ≈ 92% of alert volume is install non-determinism
Exception aging	N/A (no active exceptions)
Exposure without recovery capability	2 new untracked alerts (#944/#945, #941) in files modified same-day — recovery capability present (CodeQL catches it) but tracking lag exists

Generated by UK AI Operational Resilience · copilot · auto · 75.7 AIC · ⌖ 8.88 AIC · ⊞ 7.8K · ◷

• expires on Oct 1, 2026, 7:47 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by UK AI Operational Resilience.

A newer discussion is available at Discussion #64297.