Repository navigation
[uk-ai-resilience] GraphQL query built via Sprintf in project_command.go (Tier B) #66214
Description
Activity
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 25.8 AIC · ⌖ 12.6 AIC · ⊞ 12.4K · ◷
🍪 Issue Monster selected this for Copilot
I identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 12.8 AIC · ⌖ 9.45 AIC · ⊞ 12.4K · ◷
🍪 Issue Monster selected this for Copilot
I"ve identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 20.2 AIC · ⌖ 7.88 AIC · ⊞ 12.4K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 12 AIC · ⌖ 8.31 AIC · ⊞ 12.4K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 15.9 AIC · ⌖ 6.9 AIC · ⊞ 12.4K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 13.7 AIC · ⌖ 8.12 AIC · ⊞ 12.8K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 32.5 AIC · ⌖ 10.3 AIC · ⊞ 12.7K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 17 AIC · ⌖ 8.24 AIC · ⊞ 12.7K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 14.2 AIC · ⌖ 10.1 AIC · ⊞ 12.7K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 10.7 AIC · ⌖ 8.42 AIC · ⊞ 12.7K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 13.6 AIC · ⌖ 12 AIC · ⊞ 12.9K · ◷
116 remaining items
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 9.39 AIC · ⌖ 10.9 AIC · ⊞ 14.1K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 11.3 AIC · ⌖ 7.37 AIC · ⊞ 14.1K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.\n\nIf assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.\n\nOm nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 12.2 AIC · ⌖ 9.11 AIC · ⊞ 14.1K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 20.5 AIC · ⌖ 14 AIC · ⊞ 14K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 10 AIC · ⌖ 8.9 AIC · ⊞ 14K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 11.8 AIC · ⌖ 14.1 AIC · ⊞ 14K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 11.3 AIC · ⌖ 8.53 AIC · ⊞ 14K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 12.6 AIC · ⌖ 9.93 AIC · ⊞ 13.5K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 10.1 AIC · ⌖ 8.24 AIC · ⊞ 13.4K · ◷
Caution
agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.Details
Potential security threats were detected in the agent output.
Review the workflow run logs for details.
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 18.8 AIC · ⌖ 17.8 AIC · ⊞ 13.3K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 21.3 AIC · ⌖ 12.1 AIC · ⊞ 13.3K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 31 AIC · ⌖ 9.03 AIC · ⊞ 13.3K · ◷
Caution
agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.Details
Potential security threats were detected in the agent output.
Review the workflow run logs for details.
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 24.5 AIC · ⌖ 16.4 AIC · ⊞ 13.3K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 10.2 AIC · ⌖ 8.49 AIC · ⊞ 13.3K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 10 AIC · ⌖ 8.31 AIC · ⊞ 13.3K · ◷
Finding (Tier B, SLA: medium)
Code-scanning alerts #651/#652 (
workflow-go-graphql-injection-sprintf):pkg/cli/project_command.go:269-272builds GraphQL queries withfmt.Sprintf. Open since 2026-07-24 (oldest open alert, ~74 days).Risk scoring (1–5): exposure 2, patchability 1, detectability 2, fragility 2, ownership confidence 3.
Remediation: use GraphQL variables instead of string interpolation, or validate/escape inputs strictly; add a test. Otherwise dismiss with justification.
Human review: required if inputs originate from untrusted sources.
Context: UK AI governance report discussion created in this run ("UK AI open code risk report - 2026-10-06").