[uk ai resilience] UK AI Open Code Risk & Resilience Governance — Cycle 2026-09-21

[github-actions[bot]]

Executive Summary

This is the continuous reassessment cycle for github/gh-aw covering the last 7-day lookback window (2026-09-14 → 2026-09-21, 70 commits, 20 security-signal commits). The governance program is functioning as an established remediation loop: 13 of the ~15 substantive open code-scanning/hygiene findings already have dedicated [uk-ai-resilience] tracking issues from prior cycles, and no net-new untracked substantive finding was identified this cycle beyond what is already tracked. The two areas needing continued attention are (1) a persistent ownership-control gap (no .github/CODEOWNERS) covering security-sensitive compiler/CLI/Docker/workflow paths that remains unresolved across multiple cycles, and (2) a recurring alert-dismissal hygiene gap where CodeQL alerts stay open after their remediation PRs merge — a resilience/velocity issue, not a code defect. No secrets were found exposed (0 open secret-scanning alerts) and remediation velocity this window was good (3 same-week "Fix failing GitHub Actions job" fast-follow commits show active operational correction). No new issues are created this run — the two highest-priority Tier B/C items (#61637 CODEOWNERS gap, #59490 alert-dismissal hygiene) already have open, undismissed, non-duplicate tracking issues from prior cycles.

Asset graph summary (recent-change scoped)

Area	Component/Files	Role	Dependencies Implicated	Ownership Signal
Logs orchestration	pkg/cli/logs_orchestrator_stdin.go	CLI runtime — audit/log mining pipeline	none	Automated (github-actions[bot] debug-logging sweep #62300); human review via pelikhan
Safe outputs	pkg/workflow safe-outputs config, safeoutputs CLI transport	Compile-time codegen + runtime CLI	none	Copilot coding agent + pelikhan (human-reviewed PRs)
Threat detection	Threat-detection reporting/system-block logic	Runtime guardrail	none	Copilot coding agent + pelikhan
Engine/compiler config	pkg/workflow/compiler_yaml_ai_execution.go	Compile-time YAML→Actions codegen	none direct	Copilot coding agent (auth-merge fix #61424)
MCP subsystem	mcp_cli_mount.go, mcp_setup_generator.go, mcp_github_config.go	Compile-time MCP server wiring	MCP Gateway v0.4.25	Copilot coding agent
Package manifest imports	add_package_manifest_imports.go, add_package_manifest_includes.go	CLI import-resolution	none	Copilot coding agent + pelikhan
Graders/evals	pkg/workflow/graders_config.go, AIC accounting	Runtime evaluation/metrics	none	Copilot coding agent + pelikhan
Firewall/sandbox	gh-aw-firewall (AWF) v0.28.17→v0.28.20	Runtime network egress control	AWF, MCPG pinned images	lpcox + gh-aw-bot (automated pin bumps)
CI/build tooling	scripts/ensure-docs-slide-pdf.js, Dockerfile, .github/workflows/format-and-commit.yml, daily-geo-optimizer	Build-time / doc pipeline	alpine:3.24, actions/setup-node, pip	Mixed automation + human
GraphQL project client	pkg/cli/project_command.go	CLI GitHub Projects integration	GitHub GraphQL API	Long-standing, unresolved since July (#52749)

Tier classification table

Finding	Tier	Basis
npm-install/uv-pip-install non-determinism (256 alerts, #61636)	B	Widespread CI reproducibility gap, low exploit severity, already tracked
Missing CODEOWNERS for security-sensitive paths (#61637)	B	Ownership-control gap, low technical severity, systemic
Dockerfile alpine:3.24 unpinned (#61166, alert #940)	B	Supply-chain pin gap, low immediate exploitability
format-and-commit.yml missing node-version pin (#61378, alert #831)	B	CI reproducibility, low severity
4x go/bad-redirect-check in pkg/cli & pkg/workflow (#59491)	B	Known CodeQL pattern, prior false-positive history (#57472)
go/allocation-size-overflow x5 (MCP gateway + compiler, #60876/#60875/#59773)	C	Requires code-level review of allocation bounds; Tier C pending confirmation of exploitability
go/useless-assignment-to-field in logs_orchestrator_stdin.go (#61821)	C	Newly touched file (#62300 debug-logging change) — needs re-verification post-change
daily-geo-optimizer unpinned pip install (#61379, alert #768)	C	Workflow supply-chain, restricted pending review of skill package trust
Alert-dismissal hygiene gap (#59490, #57982, #57728)	C	Process/resilience gap — alerts open despite merged fixes; restricted pending triage automation
GraphQL Sprintf construction in project_command.go (#52749)	C	Unresolved since July; needs parameterization review
Untrusted network data written to file, ensure-docs-slide-pdf.js (#53737 / alert #663)	C	Needs sanitization review before further use

No Tier A (auto-clear) or Tier D (decommission) determinations were warranted this cycle — all findings have active remediation paths and are not exposure-without-recovery cases.

Control verification gaps

Control Domain	Verdict	Evidence
Ownership controls	Gap	.github/CODEOWNERS does not exist in the repo; #61637 tracks this across multiple cycles unresolved
SDLC controls	Adequate	Changeset discipline observed (.changeset/*.md present across dependency/feature PRs); PRs carry Co-authored-by human review trailers alongside Copilot commits
Dependency controls	Partial	Automated Actions-version bump workflow (#62328) and AWF/MCPG pin bumps show active maintenance, but Dockerfile base image and one workflow's setup-node step remain unpinned (#61166, #61378)
Secret exposure controls	Adequate (verified)	0 open secret-scanning alerts; no plaintext credential patterns found in the reviewed files
Runtime observability controls	Improving	Multiple recent commits add structured debug logging (#62300 threat-detection/stdin paths, #61710 add-workflow paths) — expanding, not just adding noise
Recovery controls	Adequate	3 same-window "[WIP] Fix failing GitHub Actions job" fast-follow commits (#61938, #60890, #60850) demonstrate quick detection-to-fix turnaround for CI breakage

Risk-scoring table and rationale

Area	Exposure Amplification	Patchability	Detectability	Operational Fragility	Ownership Confidence	Tier
CODEOWNERS gap (#61637)	Low	High (single file add)	High (static check)	Medium (no auto-enforced review routing)	Medium	B
npm/pip install non-determinism (#61636)	Low	High (lockfile/hash pinning)	High	Low	High	B
Dockerfile unpinned base (#61166)	Low-Medium	High	High	Low	High	B
bad-redirect-check x4 (#59491)	Low (history of false positives, #57472)	Medium	High	Low	Medium	B
allocation-size-overflow x5 (#60876/#60875/#59773)	Medium (unbounded allocation potential)	Medium (needs bound checks)	Medium	Medium	Medium	C
Alert-dismissal hygiene (#59490 et al.)	Low (process gap, not a live vuln)	High (triage automation)	Low (silent drift)	Medium	Medium	C
GraphQL Sprintf construction (#52749)	Medium (injection surface if inputs uncontrolled)	Medium (needs param review)	Medium	Low	Low (aged 2+ months unresolved)	C
Untrusted data → file write (#53737)	Medium	Medium	Low	Medium	Medium	C

Remediation queue with SLAs

Priority	Finding	Action	SLA
High	CODEOWNERS gap (#61637)	Add .github/CODEOWNERS covering pkg/cli/, pkg/workflow/, Dockerfile, .github/workflows/	High — close within current sprint
High	Alert-dismissal hygiene (#59490/#57982/#57728)	Add automated CodeQL alert-dismissal check tied to merged remediation PRs	High
Medium	Dockerfile/node-version/pip pinning (#61166/#61378/#61379)	SHA/version-pin remaining unpinned build inputs	Medium
Medium	go/allocation-size-overflow cluster (#60876/#60875/#59773)	Review MCP config generator and compiler allocation bounds	Medium
Medium	GraphQL Sprintf construction (#52749)	Parameterize GraphQL query construction in project_command.go	Medium — aged, escalate if untouched next cycle
Low	js/http-to-file-access (#53737 / alert #663)	Sanitize/validate network response before file write in ensure-docs-slide-pdf.js	Low

Exception register

No new temporary exceptions requested or granted this cycle. All open findings remain under active tracking issues with no repository-hiding recommendation.

Operational metrics baseline

• MTTR proxy: 3 CI-breakage fast-follow fixes observed within the 7-day window (same-day to next-day turnaround based on commit timestamps).
• Ownership coverage: 0% — no CODEOWNERS file exists; all review routing is informal.
• Unsupported dependency ratio: Low — actively maintained via automated Actions/AWF/MCPG version-bump commits; 2 build inputs remain unpinned (Dockerfile base image, 1 workflow's node-version).
• Exception aging: N/A — no active exceptions.
• Exposure without recovery capability: None identified — all open findings have active tracking issues and demonstrated recent remediation velocity.

Generated by UK AI Operational Resilience · copilot · auto · 84.1 AIC · ⌖ 7.28 AIC · ⊞ 7.9K · ◷

• expires on Sep 24, 2026, 7:38 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by UK AI Operational Resilience.

A newer discussion is available at Discussion #62691.