[uk ai resilience] UK AI Open Code Risk & Resilience Governance – 2026-11-11

[github-actions[bot]]

Executive summary

Lookback 7 days: 370 commits (201 with security signals), 26 open security issues, 23 open code-scanning alerts, 0 secret-scanning alerts. Sub-agents were not run and no deep control verification was done, so confidence is partial. Findings come only from the alert metadata.

Asset graph summary (recent-change scoped)

• Shell scripts in actions/setup/sh/ (MCP gateway, CLI/DIFC proxy, git patch, usage artifact collection, cache memory commit). These run in the runtime setup path.
• JS handlers in actions/setup/js/ (mcp_handler_shell.cjs, mcp_http_server_runner.cjs).
• Go CLI (pkg/cli/add_package_ownership.go, mcp_logs_guardrail.go).
• Workflows and lock files (upgrade-test.yml, copilot-maintenance.yml, spec-librarian, smoke-copilot, jsweep).
• install-gh-aw.sh.

Tier classification

Area	Tier	Basis
actions/setup/sh/*	B	About 8 high-severity CWE-59 (symlink) and CWE-78/732 alerts in runtime setup scripts
actions/setup/js MCP handlers	B	CWE-78 (high) and js/file-system-race (high)
Workflows (upgrade-test.yml, copilot-maintenance.yml)	B	High: non-deterministic npm/uv pip installs (supply chain)
pkg/cli Go	A/B	Low/medium CWE-22, CWE-532
Lock files	A/B	CWE-1327, CWE-180 (medium/low)

No Tier C/D candidates were identified.

Control verification gaps

• Dependency controls: unpinned or non-lockfile installs in workflows.
• SDLC controls: temp-file and symlink handling in shell scripts is not standardised.
• Ownership, observability and recovery controls: not verified this run.

Risk scoring

Qualitative only. Exposure amplification is high for setup scripts because they run in every compiled workflow. Patchability is high, since the fixes are small and local. Ownership confidence is unknown.

Remediation queue

Item	SLA
Harden symlink/temp-file handling (CWE-59, CWE-732, CWE-377) in actions/setup/sh	High (7d)
Fix CWE-78 in the MCP shell handler and file-system race	High (7d)
Pin/lockfile installs (npm ci, uv pip --require-hashes) in workflows	High (7d)
CWE-1327, CWE-532, CWE-180, CWE-22	Medium (30d)

Human review is triggered for any change to the setup scripts and the MCP gateway.

Exception register

None.

Operational metrics baseline

• MTTR proxy: not computed.
• Ownership coverage: not computed.
• Unsupported dependency ratio: not computed.
• Exception aging: 0 exceptions.
• Exposure without recovery capability: none identified.

Issues

No issues were created because issues are disabled on github/gh-aw.

Generated by UK AI Operational Resilience · copilot · auto (Claude Sonnet 5.5) · ~16 AIC · ⌖ ~2 AIC · ⊞ 8.8K · ◷

• expires on Nov 14, 2026, 7:33 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by UK AI Operational Resilience.

A newer discussion is available at Discussion #77186.