[uk ai resilience] UK AI Open Code Risk & Resilience Governance Report — 2026-08-07

[github-actions[bot]]

Executive Summary

7-day recent-changes governance sweep (2026-07-31 → 2026-08-07, github/gh-aw): 482 commits, 189 flagged security-signal commits, 19 open security issues, 5 open code-scanning alerts (all warning severity), 0 open secret-scanning alerts. No repository-hiding recommendations made per UK AI open-code guidance — findings focus on remediation velocity and operational resilience.

Asset Graph Summary (recent-change scoped)

Segment	Signal	Notes
Go compiler/CLI (pkg/cli, pkg/workflow)	High commit volume, GraphQL injection alerts	project_command.go builds GraphQL queries via fmt.Sprintf
gh-aw-firewall images (squid, cli-proxy, agent)	16 container-related commits, 3 open container-scan issues (#51020-51022)	Daily scan pipeline active but gate failing
Sandbox tool images (arxiv, ast-grep, context7, grafana, memory, serena)	Issue #51034	Critical CVEs unpatched 5+ consecutive days
Firewall/MCP observability pipeline	Issue #51111	Only 7.1% of sampled runs retain access.log/gateway.jsonl
scripts/ensure-docs-slide-pdf.js	Alert #654	Untrusted-data file write pattern
Docs/eslint/test tooling	30 docs + 8 test + eslint commits	Lower risk, routine maintenance

Top committers: Copilot (372), github-actions[bot] (60), Peli de Halleux/maintainer (31), dependabot[bot] (13) — indicates heavy bot-driven automation with maintainer oversight concentrated in one person.

Tier Classification

Area	Tier	Rationale
GraphQL query construction (alerts #651/#652)	B — Open With Conditions	Escaping applied but brittle; low exploit likelihood, patchable
ensure-docs-slide-pdf.js untrusted write (#654)	B — Open With Conditions	Build/docs script, not runtime-critical path
Sandbox tool container images (#51034)	C — Restricted Pending Review	Real critical CVEs unpatched 5+ days, gate failing daily
Firewall/MCP observability gap (#51111)	C — Restricted Pending Review	92.9% of runs lack audit trail — blind spot for incident response
gh-aw-firewall core images (#51020-51022)	B — Open With Conditions	Scan pipeline functioning, findings tracked, not yet critical-blocking

Control Verification Gaps

Domain	Status	Evidence
Ownership	Partial	Single maintainer (pelikhan) concentration; bots dominate commit volume
SDLC	Verified-OK	Active CI, daily scans, code-scanning integration functioning
Dependency	Gap	Sandbox images unpatched 5+ days despite passing/failing gate correctly
Secret exposure	Verified-OK	0 open secret-scanning alerts
Runtime observability	Gap	92.9% of sampled runs missing firewall/MCP audit artifacts (#51111)
Recovery	Gap	No evidence of automated rollback/rebuild on critical CVE detection; manual rebuild required (#51034)

Risk Scoring (Tier C items)

Item	Exposure Amplification	Patchability	Detectability	Operational Fragility	Ownership Confidence
Sandbox image CVEs (#51034)	Medium (sandboxed tool containers)	High (upstream fixes exist)	High (gate detects)	High (5-day failure streak)	Medium
Observability gap (#51111)	High (blind spot on all firewall-enabled runs)	Medium (likely artifact-upload config fix)	Low (gap self-masking)	High	Medium

Remediation Queue

Item	Action	SLA
#51034 sandbox CVEs	Rebuild arxiv/ast-grep/context7/grafana/memory/serena images with patched base packages	Critical
#51111 observability gap	Fix artifact upload/retention step for access.log & gateway.jsonl	High
#651/#652 GraphQL injection	Replace fmt.Sprintf string interpolation with GraphQL variables in project_command.go	Medium (new issue filed)
#654 untrusted file write	Validate/sanitize network-derived data before file write in ensure-docs-slide-pdf.js	Medium (new issue filed)
#51020-#51022 firewall image findings	Continue tracking via existing container-scan issues	Medium

Exception Register

None required this cycle — no permanent hidden-repo or scope exceptions requested.

Operational Metrics Baseline

• MTTR proxy: ≥5 days for critical CVE remediation (per [aw-failures] Rebuild scanned container images — critical CVEs have failed the security gate 5+ days straight #51034 streak)
• Ownership coverage: 1 primary human maintainer identified across 482 commits; heavy automation reliance
• Unsupported/CVE-affected dependency ratio: 6 sandbox images flagged (openssl, glibc, perl-base, Node.js CVEs)
• Exception aging: N/A (no active exceptions)
• Exposure without recovery capability: firewall/MCP telemetry gap affects ~93% of sampled runs — recovery/audit capability currently degraded

Generated by UK AI Operational Resilience · auto · 43 AIC · ⌖ 2.76 AIC · ⊞ 8.8K · ◷

• expires on Aug 10, 2026, 7:45 AM UTC-08:00