Skip to content

[uk-ai-resilience] Alert-dismissal hygiene gap: 3 CodeQL alerts remain open despite closed/remediated tracking issues (Tier C) #57982

Closed
Closed
[uk-ai-resilience] Alert-dismissal hygiene gap: 3 CodeQL alerts remain open despite closed/remediated tracking issues (Tier C)#57982
Labels
ai-generatedcookieIssue Monster Loves Cookies!high-prioritysecurityuk-ai-resilience

Description

@github-actions
github-actions
bot
opened on Sep 2, 2026

Tier: C — Restricted Pending Review (process gap, not live code risk)

Finding: Three open CodeQL alerts (#669/#668 in pkg/workflow/graders_config.go, #667 in pkg/cli/add_package_manifest_includes.go, #653 actionlint workflow-out-of-context) each have a pre-existing tracking issue (#57472, #54037, #57728 respectively) asserting the underlying finding is a false positive or already remediated in code — yet all three alerts remain open/undismissed in code scanning. This is a recurring alert-lifecycle hygiene gap distinct from the individual code findings themselves: it inflates the open-alert count, obscures true remediation status in dashboards, and increases MTTR-proxy metrics without reflecting live risk.

Risk-scoring breakdown (aggregate across the 3 alerts)

Dimension Rating
Exposure amplification Low
Patchability High (fix already believed complete per linked issues)
Detectability High (alerts are visible; the gap is in closure, not detection)
Operational fragility Low
Ownership confidence Low — no CODEOWNERS file to route alert-dismissal responsibility

Remediation action

For each of #57472, #54037, #57728: verify the referenced fix is merged and live, then dismiss the corresponding CodeQL alert(s) with an explicit, documented reason (e.g., "false positive" or "fixed"). Do not leave alerts open once root-cause issues are closed. Consider adding a lightweight periodic check (or workflow) that flags alerts whose linked tracking issue is closed but the alert itself remains open, to prevent recurrence.

SLA urgency: high (7 days) — this is a low-effort, high-value fix to remediation velocity and dashboard accuracy.

Discussion report

See the full UK AI Governance: Recent-Changes Risk & Resilience Review (2026-09-02) discussion for the complete asset graph, control verification, and risk-scoring context, including the operational metrics baseline (MTTR proxy, ownership coverage).

Generated by UK AI Operational Resilience · copilot · auto · 43.2 AIC · ⌖ 6.81 AIC · ⊞ 8.1K · ◷

Activity

  1. github-actions
    added
    security
    high-priority
    ai-generated
    cookieIssue Monster Loves Cookies!
    uk-ai-resilience
    on Sep 2, 2026

  2. github-actions commented on Sep 6, 2026

    @github-actions
    github-actionsbot
    on Sep 6, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    Warning

    Firewall blocked 1 domain

    The following domain was blocked by the firewall during workflow execution:

    • ab.chatgpt.com

    To allow these domains, add them to the network.allowed list in your workflow frontmatter:

    network:
  allowed:
    - defaults
    - "ab.chatgpt.com"

    See Network Configuration for more information.

    🍪 Om nom nom by Issue Monster · codex · gpt53codex · 4.85 AIC · ⌖ 4.69 AIC · ⊞ 19.9K · ◷

  3. github-actions commented on Sep 6, 2026

    @github-actions
    github-actionsbot
    on Sep 6, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    Warning

    Firewall blocked 1 domain

    The following domain was blocked by the firewall during workflow execution:

    • ab.chatgpt.com

    To allow these domains, add them to the network.allowed list in your workflow frontmatter:

    network:
  allowed:
    - defaults
    - "ab.chatgpt.com"

    See Network Configuration for more information.

    🍪 Om nom nom by Issue Monster · codex · gpt53codex · 4.72 AIC · ⌖ 4.73 AIC · ⊞ 20K · ◷

  4. github-actions commented on Sep 7, 2026

    @github-actions
    github-actionsbot
    on Sep 7, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    Warning

    Firewall blocked 1 domain

    The following domain was blocked by the firewall during workflow execution:

    • ab.chatgpt.com

    To allow these domains, add them to the network.allowed list in your workflow frontmatter:

    network:
  allowed:
    - defaults
    - "ab.chatgpt.com"

    See Network Configuration for more information.

    🍪 Om nom nom by Issue Monster · codex · gpt53codex · 3.95 AIC · ⌖ 4.75 AIC · ⊞ 20.1K · ◷

  5. github-actions commented on Sep 14, 2026

    @github-actions
    github-actionsbot
    on Sep 14, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    🍪 Om nom nom by Issue Monster · pi · gpt54 · 9.27 AIC · ⊞ 12.2K · ◷

  6. github-actions commented on Sep 15, 2026

    @github-actions
    github-actionsbot
    on Sep 15, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    🍪 Om nom nom by Issue Monster · pi · gpt54 · 13.6 AIC · ⊞ 13.3K · ◷

  7. github-actions commented on Sep 19, 2026

    @github-actions
    github-actionsbot
    on Sep 19, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    🍪 Om nom nom by Issue Monster · pi · gpt54 · 7.96 AIC · ⊞ 12.2K · ◷

  8. github-actions commented on Sep 21, 2026

    @github-actions
    github-actionsbot
    on Sep 21, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    🍪 Om nom nom by Issue Monster · pi · gpt54 · 9.21 AIC · ⊞ 12.2K · ◷

  9. github-actions commented on Sep 28, 2026

    @github-actions
    github-actionsbot
    on Sep 28, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    🍪 Om nom nom by Issue Monster · pi · gpt54 · 9.5 AIC · ⌖ 10.2 AIC · ⊞ 13.3K · ◷

  10. github-actions commented on Sep 30, 2026

    @github-actions
    github-actionsbot
    on Sep 30, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    Ive identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    🍪 Om nom nom by Issue Monster · pi · gpt54 · 9.89 AIC · ⌖ 10.4 AIC · ⊞ 14.1K · ◷

  11. github-actions
    closed this as completedon Oct 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    ai-generatedcookieIssue Monster Loves Cookies!high-prioritysecurityuk-ai-resilience

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions