[uk ai resilience] UK AI governance: open-code risk report 2026-10-12

[github-actions[bot]]

Executive summary

Lookback 7d (since 2026-10-05): 354 commits (224 security-signal), 7 open security issues, 247 open code-scanning alerts, 0 secret-scanning alerts. Risk is dominated by supply-chain determinism in generated lock files and 3 critical Go quoting alerts. Sub-agents were not dispatched; analysis was done directly from the pre-computed data (limitation: lower confidence on ownership/runtime controls).

Asset graph summary

• Compiler/generator Go code (pkg/workflow/) – emits workflow YAML; 3 critical go/unsafe-quoting alerts (evals_steps.go:576, maintenance_workflow_yaml_jobs.go:586, :619).
• Compiled workflows (.github/workflows/*.lock.yml) – 227 alerts, mostly non-deterministic npm install/uv pip install.
• JS/runtime helpers – a few high/medium alerts (insecure temp file, URL substring sanitization).

Tier classification

Area	Tier	Priority
pkg/workflow quoting in generated shell	B	critical
Lock-file npm/uv/pip installs without pinning	B	high
JS helpers (temp file, URL check)	B	medium
Release attestations (#52302)	B	medium

Control verification gaps

• Ownership: CODEOWNERS-level coverage not verified here.
• Dependency: 216 npm + 10 uv + 1 pip install alerts show unpinned/non-lockfile installs.
• Secrets: no open alerts (good).
• Recovery: compiled lock files regenerable via make recompile (good patchability); release provenance gap per Add per-binary attestations to release artifacts #52302.

Risk scoring

Area	Exposure	Patchability	Detectability	Fragility	Ownership conf.
Go quoting	High	High	High (CodeQL)	Med	Med
Lock-file installs	High	High (single template fix)	High	Med	Med

Remediation queue

• Critical (7d): review/fix 3 go/unsafe-quoting alerts.
• High (14d): pin/lockfile-based installs in the compiler templates, then recompile.
• Medium (30d): JS helper alerts; release attestations.

Exception register

None.

Operational metrics baseline

• MTTR proxy: not computed (alert age data not analysed)
• Ownership coverage: not verified
• Unsupported dependency ratio: n/a
• Exception aging: 0 exceptions
• Exposure without recovery capability: low (templates regenerable)

Generated by UK AI Operational Resilience · copilot · auto · 15.8 AIC · ⌖ 0.718 AIC · ⊞ 7.9K · ◷

• expires on Oct 15, 2026, 7:41 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by UK AI Operational Resilience.

A newer discussion is available at Discussion #68741.