[uk ai resilience] [uk-ai-resilience] Recent-change governance report 2026-10-27

[github-actions[bot]]

Executive summary

7-day window: 299 commits (186 security-signal), 29 open security issues, 10 open code-scanning alerts, 0 secret-scanning alerts. Sub-agents were not dispatched (limited tool permissions); this report is a direct, partial-confidence assessment from pre-computed inputs and spot-reads of code.

Top finding: unauthenticated MCP HTTP runner (ai-scan/cwe-306, cwe-400) and an open go/bad-redirect-check error in grader shell loading.

Asset graph (recent-change scoped)

• actions/setup/js (MCP HTTP server runner, safe-outputs handlers, prompt interpolation): runtime
• pkg/parser (import cache, remote path resolve): compiler/parser
• pkg/workflow/gradershell: grader shell loading
• pkg/cli/syft.go, pkg/workqueue/replay.go: CLI/runtime
• actions/setup-cli/install.sh: supply chain (cwe-354 integrity check)

Tier classification and risk scoring

Area	Alerts	Tier	Rationale
actions/setup/js/mcp_http_server_runner.cjs	#1037 (CWE-306), #1038 (CWE-400)	C	No auth on POST handler, unbounded body buffering (for await chunks, no size cap); exposure amplification high
pkg/workflow/gradershell/load.go	#1034 (error)	B	Path validation is strict; symlink/redirect check needs review
actions/setup-cli/install.sh	#1040	B	Installer integrity check weakness; supply chain
pkg/parser import_cache / remote_resolve_path	#1044, #1043 (CWE-59)	B	Symlink handling
safe_outputs_handlers.cjs	#1039 (CWE-59)	B	Symlink handling
interpolate_prompt.cjs	#1042 (CWE-1336)	B	Template injection
pkg/cli/syft.go	#1041 (CWE-377)	B	Temp file handling
pkg/workqueue/replay.go	#1036	B	Allocation size overflow

Control verification gaps

• Ownership: no CODEOWNERS evidence verified in this run (low confidence).
• Dependency: container-image CVE burn-down issues ([container-image-scan] Firewall CVE burn-down #69275, [container-image-scan] ghcr.io/xberg-io/xberg CVE burn-down #68976, [container-image-scan] Serena CVE burn-down #68975, [container-image-scan] gh-aw-router CVE burn-down #68347, [container-image-scan] grafana/mcp-grafana CVE burn-down #68346, [container-image-scan] Node CVE burn-down #68344, [container-image-scan] GitHub MCP Server CVE burn-down #68342, [container-image-scan] MCP Gateway CVE burn-down #68341, [container-image-scan] Firewall CVE burn-down #68340) remain open; [uk-ai-resilience] [security] Make generated npm/pip/uv installs deterministic in lock files #68043 on deterministic installs open.
• Runtime: MCP HTTP runner lacks request-size limits and auth.
• Recovery: not assessed in depth.

Remediation queue

Item	SLA
Add body-size cap and auth/loopback binding to MCP HTTP runner	high
Review #1034 bad-redirect-check	high
Verify install.sh checksum/signature (#1040)	medium
Symlink hardening (#1039, #1043, #1044)	medium
Burn down container CVE issues	medium

Exception register

None.

Operational metrics baseline

• MTTR proxy: not computed (insufficient data)
• Ownership coverage: unverified
• Unsupported dependency ratio: not computed
• Exception aging: n/a (0 exceptions)
• Exposure without recovery capability: not assessed

Generated by UK AI Operational Resilience · copilot · auto · ~16 AIC · ⌖ ~1 AIC · ⊞ 8K · ◷

• expires on Oct 30, 2026, 7:40 AM UTC-08:00