[uk ai resilience] [uk-ai-resilience] UK AI Open Code Risk & Resilience Governance Report — 2026-07-02

[github-actions[bot]]

UK AI Open Code Risk & Resilience Governance — 2026-07-02

Lookback window: 2026-06-25 → 2026-07-02 | Commits: 418 (92 security-signal) | Run: §28604141985

---

1. Executive Summary

Active development velocity is high (418 commits / 7 days, dominated by Copilot-authored PRs). Security posture is stable but has 3 untracked findings from CodeQL alerts created in this window. No secret scanning alerts. Two high-priority issues (#42799, #42800) were created yesterday and remain open and unassigned. The critical governance gap is the insecure temp-file pattern (CodeQL HIGH #635) in a CI evaluation script, which has no tracking issue.

No repository hiding or access restriction is recommended; all findings are addressable through targeted code fixes.

---

2. Asset Graph Summary (Recent-Change Scoped)

Asset	Segment	Tier	Key Risk	Owner Signal
scripts/ensure-docs-slide-pdf.js	CI/Scripts	B	CWE-434/912: network→file write (CodeQL #636, Medium)	Active script maintenance; no dedicated owner
scripts/prepare-objective-impact-safe-output-evaluations.cjs	CI/Scripts	B	CWE-377/378: insecure temp file (CodeQL #635, HIGH)	Bot-authored; no dedicated owner
pkg/cli/project_command.go	CLI	B	CWE-89: GraphQL injection (CodeQL #627/#628, Warning)	pelikhan active reviewer
pkg/workflow/repository_features_validation.go	Compiler	A	Static GraphQL concat (CodeQL #626, Note)	pelikhan; low actual risk
.github/workflows/publish-safe-outputs-node.yml	CI/CD Pipeline	B	CWE-829: unpinned docker/build-push-action@v7.2.0 (CodeQL #625)	Issue #42800 open
pkg/parser/schedule_fuzzy_scatter.go	Compiler	B	CWE-190/681: int→uint32 overflow (CodeQL #637, HIGH)	Issue #42799 open
pkg/compiler/ (ARC/DinD PRs #42815, #42855)	Compiler	A	Path rewrite for DinD; tested and reviewed	lpcox + Copilot

No Tier C or D assets identified.

---

3. Tier Classification Table

Area	Tier	Rationale
scripts/ensure-docs-slide-pdf.js (CodeQL #636)	B — Open With Conditions	Network-sourced data written to filesystem. Script is CI-only (not runtime), reducing blast radius. Medium severity. Needs: sanitization review or code fix.
scripts/prepare-objective-impact-safe-output-evaluations.cjs (CodeQL #635)	B — Open With Conditions	HIGH severity. Insecure temp file — TOCTOU race, other-user-accessible. CI script context limits exposure, but the pattern is a known attack vector (CWE-377). Needs tmp library or mkdtemp.
pkg/cli/project_command.go (CodeQL #627/#628)	B — Open With Conditions	GraphQL node IDs injected via fmt.Sprintf without escaping. IDs come from prior API responses, not direct user input. Low exploitability, but inconsistent with escapeGraphQLString(title) on line 303. Defense-in-depth gap.
.github/workflows/publish-safe-outputs-node.yml (CodeQL #625)	B — Open With Conditions	Tracked: #42800 (1 day old, unassigned). Mutable tag on publish pipeline action. One-line fix.
pkg/parser/schedule_fuzzy_scatter.go (CodeQL #637)	B — Open With Conditions	Tracked: #42799 (1 day old, unassigned). HIGH severity integer overflow in compiler parser. Silent wrong behavior on values >4B.
repository_features_validation.go (CodeQL #626)	A — Open Safe	Static query, no user input. Note-level. Low risk. No issue needed.
pkg/compiler/ ARC/DinD paths	A — Open Safe	PRs reviewed and tested. No CodeQL findings. Runtime path redirects have correct scoping.

---

4. Control Verification Gaps

Domain	Evidence	Gap	Confidence
Ownership	pelikhan active on compiler/CLI PRs; lpcox on ARC/DinD. Bot-authored scripts lack named owners.	CodeQL alerts #635, #636 are 7–10 days old with no assignee or tracking issue.	Medium
SDLC	CodeQL scanning active (v2.25.6). Semgrep running daily. PRs require review. make fmt + custom linters enforced.	Scripts (scripts/*.js, scripts/*.cjs) appear underrepresented in test coverage. No CI gate blocks on open Medium+ CodeQL alerts.	Medium
Dependency	Secret scanning: 0 alerts. npm/Node scripts in scripts/: dependency management unclear (no visible package.json pinning check in CI for these scripts).	docker/build-push-action@v7.2.0 in publish-safe-outputs-node.yml is not SHA-pinned (tracked #42800). No automated Dependabot SHA-pinning enforcement for Actions.	High
Secret exposure	0 open secret scanning alerts. GITHUB_TOKEN scoped appropriately in most workflows.	One user-reported concern (#42749) about misleading "will be leaked" compiler warning for auto-excluded engine.env secrets — not a real leak, but UX gap.	High (no real leak)
Runtime observability	Audit logging present in pkg/audit/. Error classification in detect_agent_errors.cjs.	No explicit monitoring/alerting for schedule parsing errors (schedule_fuzzy_scatter.go). Silent integer overflow would not trigger an alert.	Low
Recovery	Issues #42799 and #42800 created same-day as detection (2026-07-01). Remediation patterns for SHA pinning are well-documented.	Both issues unassigned. No SLA tracking or triage evidence. MTTR proxy: ~1 day since creation, no fix committed yet.	Medium

---

5. Risk-Scoring Table

Area	Exposure	Patchability	Detectability	Fragility	Ownership	Score	Tier	SLA
scripts/ensure-docs-slide-pdf.js (CodeQL #636, CWE-434/912)	2	2	3	2	2	11	B	Medium (14 days)
scripts/prepare-objective-impact-safe-output-evaluations.cjs (CodeQL #635, CWE-377/378)	2	1	3	2	2	10	B	High (7 days)
pkg/cli/project_command.go (CodeQL #627/#628, CWE-89)	2	2	4	2	3	13	B	Medium (14 days)
publish-safe-outputs-node.yml (CodeQL #625, CWE-829)	3	1	4	4	3	15 — tracked #42800	B	High (7 days)
schedule_fuzzy_scatter.go (CodeQL #637, CWE-190/681)	2	1	4	2	4	13 — tracked #42799	B	High (7 days)
repository_features_validation.go (CodeQL #626)	1	1	2	1	3	8	A	None
pkg/compiler/ ARC/DinD	1	1	2	2	4	10	A*	None

* ARC/DinD scored A because the changes are tested, reviewed, and contain no CodeQL findings.

Scoring dimensions (1=low, 5=high): Exposure amplification · Patchability (1=trivial) · Detectability (5=silent) · Operational fragility · Ownership confidence

---

6. Remediation Queue

Priority	Finding	SLA	Action	Assignee
🔴 HIGH	scripts/prepare-objective-impact-safe-output-evaluations.cjs — insecure temp file (CodeQL #635, CWE-377)	7 days	Replace path.join(os.tmpdir(), ...) with fs.mkdtempSync(path.join(os.tmpdir(), 'prefix-')) or use tmp npm library	Unassigned — new issue being created
🔴 HIGH	publish-safe-outputs-node.yml — unpinned action (CodeQL #625, CWE-829)	7 days	Pin docker/build-push-action to full SHA. See issue #42800.	Unassigned — issue #42800
🔴 HIGH	schedule_fuzzy_scatter.go — int overflow (CodeQL #637, CWE-190)	7 days	Replace strconv.Atoi + cast with strconv.ParseUint(s, 10, 32). See issue #42799.	Unassigned — issue #42799
🟡 MEDIUM	scripts/ensure-docs-slide-pdf.js — http-to-file (CodeQL #636, CWE-434)	14 days	Validate/sanitize network data before writing; or confirm intent and document as accepted risk	Unassigned — new issue being created
🟡 MEDIUM	pkg/cli/project_command.go — GraphQL unescaped IDs (CodeQL #627/#628, CWE-89)	14 days	Wrap ownerId, projectId, repositoryId with escapeGraphQLString() or use parameterized GraphQL variables	Unassigned

---

7. Exception Register

No exceptions requested. All findings are patchable without exception. No permanent hiding or access restriction recommended.

---

8. Operational Metrics Baseline

Metric	Value	Notes
MTTR proxy	~1 day (creation → tracking), fix pending	Issues #42799/#42800 created same day; 0 fixes committed yet
Ownership coverage	~60%	Compiler/CLI well-owned; scripts/ segment lacks clear ownership
Unsupported dependency ratio	Low	Main dependency concern: 1 unpinned Actions tag (CodeQL #625)
Exception aging	0 exceptions	No active exception register
Exposure without recovery	LOW	All findings are in CI scripts or compiler; no runtime/production service exposure
Open CodeQL alerts	7 (6 real, 1 smoke test dummy #564)	2 newly tracked, 2 being tracked this run, 3 gaps remaining
Secret scanning alerts	0	✅
High-severity untracked	1 (CodeQL #635)	Resolved by new issue created this run

---

References:

• §28604141985
• CodeQL #635 · CodeQL #636 · CodeQL #625 · CodeQL #637
• Issues: #42799 · #42800

Generated by UK AI Operational Resilience · 140.2 AIC · ⌖ 9.05 AIC · ⊞ 5.2K · ◷

• expires on Jul 5, 2026, 8:17 AM UTC-08:00