[uk ai resilience] UK AI Open Code Risk & Resilience — Weekly Review (2026-08-04)

[github-actions[bot]]

Executive Summary

Weekly UK AI Open Code Risk & Resilience review (7-day lookback, 2026-07-28→2026-08-04) for github/gh-aw. 422 commits in window (187 flagged as security-signal by keyword heuristics), 70 open security-related issues, 5 open code-scanning alerts, 0 open secret-scanning alerts.

Finding: every currently open code-scanning alert and every recurring risk pattern surfaced by recent commits already has an open, actively-tracked issue from prior governance runs. No new Tier B/C/D findings without existing coverage were identified this run, so no new issues were created (see Phase 6).

Asset Graph Summary (recent-change scoped)

• pkg/cli/ — heavy recent change volume; contains project_command.go GraphQL query construction (alerts #651/[Custom Engine Test] Test Issue Created by Custom Engine #652) and prior Sighthound CWE-78 command-injection findings (141 findings, issue [uk-ai-resilience] [uk-ai-governance] Tier B: Sighthound CWE-78 (141 findings) — formal #nosec audit required in pkg/cli/ #48406).
• scripts/ — ensure-docs-slide-pdf.js flagged by CodeQL js/http-to-file-access (alert [Custom Engine Test] Test Issue Created by Custom Engine #654); code review comments already added at the flagged line documenting the validated-URL/signature-check mitigation.
• .github/workflows/*.lock.yml — Malicious Code Scanner flagged daily-malicious-code-scan.lock.yml (alert #653) for two large prebuilt binaries (actionlint 8.4MB, gosec 69MB) committed to git history in PR fix: downgrade gosec to v2.27.1 to resolve actionlint yaml/v4 compile failure #48979 rather than built via go install; both binaries are still present in the working tree.
• Container images (gh-aw-firewall/*, gh-aw-mcpg, various MCP server images) — recurring container-image-scan findings, tracked individually (~25 open issues).
• No .github/CODEOWNERS — security-sensitive paths (pkg/cli/, scripts/, .github/workflows/, firewall/mcpg container defs) lack enforced reviewer routing (tracked, issue [uk-ai-resilience] Tier C: No .github/CODEOWNERS — security-sensitive paths lack enforced review routing #49167).

Tier Classification Table

Area	Tier	Basis
pkg/cli/project_command.go GraphQL injection (#651/#652)	B	Escaping helper present but unaudited; tracked in #47822
pkg/cli/ CWE-78 command injection (Sighthound, 141 findings)	B	Formal #nosec audit pending; tracked in #48406, #46882
scripts/ensure-docs-slide-pdf.js (#654)	C→trending A	Mitigating comment added at flagged line; duplicate tracking in #47630, #43831
actionlint/gosec binaries in git history (#653)	C	78MB opaque executables bypass review; not yet in an open issue this scan window found
Container image CVEs (~25 issues)	C/D mix	Per-image SLA tracked individually
Missing CODEOWNERS	C	Trivial fix, tracked in #49167
README.md Smoke Claude dummy finding (#564)	A	Explicit smoke-test placeholder, non-actionable

Control Verification Gaps

• Ownership: No CODEOWNERS — reviewer routing for security-sensitive paths is ad hoc (confirmed gap, [uk-ai-resilience] Tier C: No .github/CODEOWNERS — security-sensitive paths lack enforced review routing #49167 open).
• SDLC: Build tooling (actionlint, gosec) has committed binary artifacts in git history instead of go install-based provisioning, contradicting the Makefile's own documented approach (alert #653) — no dedicated remediation issue found this run.
• Dependency controls: Container image scanning is operating and generating per-image issues; cadence appears consistent (weekly artifacts).
• Secret exposure: 0 open secret-scanning alerts — clean this window.
• Runtime observability: No new gaps identified in this window's changed surfaces.
• Recovery/patch readiness: Two open Tier B/C issues ([uk-ai-resilience] [security] Fix GraphQL injection in pkg/cli/project_command.go — alerts #651 and #652 (Tier B, High) #47822 GraphQL injection, [uk-ai-resilience] [uk-ai-governance] Tier C: Unpatched Critical CVEs in container images (libc6 CVE-2026-5450) #48405 unpatched libc6 CVE) remain open past their originally-noted SLA windows and warrant re-verification of remediation velocity.

Risk-Scoring Table and Rationale

Finding	Exposure Amplification	Patchability	Detectability	Operational Fragility	Ownership Confidence	Tier
GraphQL injection (#651/#652)	Medium (server-side query construction)	High	High (CodeQL)	Low	Medium	B
CWE-78 in pkg/cli/ (Sighthound)	Medium-High	Medium (141 findings, needs bulk audit)	High	Medium	Medium	B
actionlint/gosec binaries in history	Low (build-time artifact, not runtime)	High (trivial removal + .gitignore)	Medium (requires git-history awareness)	Low	Low (no CI safeguard preventing recurrence)	C
Missing CODEOWNERS	N/A	High	N/A	Low	Low	C

Remediation Queue with SLAs

1. Remove committed actionlint/gosec binaries from git tree and add to .gitignore; confirm CI uses go install per Makefile. SLA: Medium (no open issue tracks this specifically — recommend opening if not addressed within 2 weeks).
2. Close out [uk-ai-resilience] [security] Fix GraphQL injection in pkg/cli/project_command.go — alerts #651 and #652 (Tier B, High) #47822 (GraphQL injection audit) — already past its noted 7-day SLA (was due 2026-07-31); needs owner re-engagement. SLA: Critical (overdue).
3. Add .github/CODEOWNERS per [uk-ai-resilience] Tier C: No .github/CODEOWNERS — security-sensitive paths lack enforced review routing #49167. SLA: Medium.
4. Complete formal #nosec audit for Sighthound CWE-78 findings per [uk-ai-resilience] [uk-ai-governance] Tier B: Sighthound CWE-78 (141 findings) — formal #nosec audit required in pkg/cli/ #48406/[uk-ai-resilience] [security] Review CWE-78 command injection in upgrade_command.go and runner_guard.go (Sighthound #46729, Tier [Content truncated due to length] #46882. SLA: High.

Exception Register

None newly proposed this run. No permanent hidden-repo or scope-reduction exceptions recommended.

Operational Metrics Baseline

• MTTR proxy: [uk-ai-resilience] [security] Fix GraphQL injection in pkg/cli/project_command.go — alerts #651 and #652 (Tier B, High) #47822 (opened 2026-07-24, SLA 2026-07-31) still open as of 2026-08-04 — indicates remediation velocity is lagging the stated SLA by 4+ days.
• Ownership coverage: 0% — no CODEOWNERS enforced routing exists yet.
• Unsupported dependency ratio: Not newly assessed this window; prior container-scan issues (~25 open) remain the primary tracked signal.
• Exception aging: N/A — no active exceptions.
• Exposure without recovery capability: Low — CodeQL/Sighthound/container scanners all actively producing findings with issue-based tracking; the gap is closure velocity, not detection capability.

Phase 6 — Issue Creation Decision

No new issues created. All identified Tier B/C/D findings from this run's asset graph (GraphQL injection, CWE-78, CODEOWNERS gap, ensure-docs-slide-pdf.js) already have open, non-duplicate tracking issues (#47822, #48406/#46882, #49167, #47630/#43831 respectively). The one item without existing dedicated tracking — the committed actionlint/gosec binaries (alert #653) — is assessed as low urgency (build-artifact hygiene, not a runtime security exposure) and is flagged here for future-run follow-up rather than issue creation, per the duplicate-avoidance and priority-focus guardrails.

Generated by UK AI Operational Resilience · auto · 36.4 AIC · ⌖ 11.2 AIC · ⊞ 8.9K · ◷

• expires on Aug 7, 2026, 8:15 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by UK AI Operational Resilience.

A newer discussion is available at Discussion #51125.