[uk ai resilience] [uk-ai-resilience] Weekly governance report

[github-actions[bot]]

Executive summary

Window: 7 days (since 2026-09-30), 288 commits (124 security-signal), 45 open security issues, 279 open code-scanning alerts, 0 secret-scanning alerts. Most risk is already tracked; one new untracked finding (allocation-size overflow in pkg/workflow/awf_config_policy.go). Sub-agents were not dispatched; analysis was done directly from pre-computed data (reduced confidence).

Asset graph summary

• Compiler/workflow generation (pkg/workflow): action-pin mapping, GitHub App token scoping, Claude permission hardening, TLA+ security model.
• Compiled workflows (.github/workflows/*.lock.yml): 247 non-deterministic npm install + 10 uv pip install alerts.
• CLI (pkg/cli): package manifest import handling, bad-redirect-check alerts.
• Scripts (.github/scripts): insecure temp files (5 alerts), URL substring check.
• Container images/MCP servers: CVE burn-down issues ([container-image-scan] Serena CVE burn-down #66472-66474, [container-image-scan] Node CVE burn-down #65791-65797).

Tier classification

Area	Tier	Priority
Compiled workflows npm/uv non-deterministic installs	B	high (tracked #65894)
Dockerfile base image not digest-pinned	B	high (tracked #66212)
GraphQL Sprintf in project_command.go	B	high (tracked #66214)
Insecure temp files in scripts	B	high (tracked #65895)
awf_config_policy.go allocation-size overflow (alerts 1007, 1008)	B	high (NEW)
Missing CODEOWNERS for sensitive paths	B	medium (#61637; root CODEOWNERS exists, scope unverified)
Release token minting without sign-off	C	high (tracked #60296)
Unpinned MCP npm/uvx/container images	B	medium (#65969-65971)
bad-redirect-check (5 alerts, medium)	B	medium

Control verification gaps

• Ownership: root CODEOWNERS present; .github/CODEOWNERS absent; compiler path coverage unverified.
• SDLC: positive signals (pin mapping, scoped app tokens, fail-closed credential cleanup); gap: 5 high alerts open for weeks with stalled automated fixes ([code-scanning-fixer-diagnostic] [code-scanning-fix] Stalled attempt on alert #1004 (js/insecure-temporary-file) #66397, [code-scanning-fixer-diagnostic] [code-scanning-fix] Stalled attempt: alert #1005 js/insecure-temporary-file #65978).
• Dependency: unpinned installs/images across compiled workflows and MCP servers.
• Secrets: 0 alerts; predictable JUPYTER_TOKEN tracked ([deep-report] Replace predictable JUPYTER_TOKEN (github.run_id) with a generated secret #65969).
• Observability: daily CVE burn-down scans running.
• Recovery: lock files regenerable via recompile; rollback readiness for release workflow undocumented.

Risk scoring (1 low risk - 5 high risk; ownership = confidence)

Area	Exposure	Patchability	Detectability	Fragility	Ownership conf.
npm/uv installs	4	2	1	3	4
awf_config_policy overflow	3	1	1	2	3
Release token minting	4	3	3	3	2
Unpinned images/MCP	3	2	2	3	3
Temp files	3	2	1	2	3

Remediation queue

Item	SLA
Release token sign-off (#60296), human review required	high
Bound allocation size in awf_config_policy.go (new issue)	high
Pin npm/uv installs via compiler (#65894)	high
Digest-pin Dockerfile (#66212), MCP images (#65970)	medium
Resolve temp-file stalls (#65895, #66397)	medium
Review bad-redirect-check alerts	medium

Exception register

None.

Operational metrics baseline

• MTTR proxy: oldest tracked UK-resilience issue open since 2026-09-11 (~26 days).
• Ownership coverage: root CODEOWNERS present; path coverage unverified.
• Unsupported dependency ratio: ~92% of alerts (257/279) concern non-pinned installs.
• Exception aging: 0 exceptions.
• Exposure without recovery capability: 1 area (release token minting).

Generated by UK AI Operational Resilience · copilot · auto · 26.8 AIC · ⌖ 8.81 AIC · ⊞ 7.9K · ◷

• expires on Oct 10, 2026, 7:47 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by UK AI Operational Resilience.

A newer discussion is available at Discussion #66932.