[oblt-aw][security] SEC-030 — findings (2026-05-09)

[elastic-vault-github-plugin-prod]

Security findings (SEC-030)

Analysis date: 2026-05-09
Occurrences: 54

Details

1. .github/workflows/ci.yml — line 29 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

2. .github/workflows/ci.yml — line 41 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

3. .github/workflows/ci.yml — line 44 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

4. .github/workflows/ci.yml — line 49 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

5. .github/workflows/ci.yml — line 70 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

6. .github/workflows/ci.yml — line 73 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

7. .github/workflows/ci.yml — line 95 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

8. .github/workflows/ci.yml — line 126 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

9. .github/workflows/distribute-client-workflow.yml — line 37 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

10. .github/workflows/distribute-client-workflow.yml — line 44 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

11. .github/workflows/distribute-client-workflow.yml — line 51 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

12. .github/workflows/distribute-client-workflow.yml — line 95 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

13. .github/workflows/distribute-client-workflow.yml — line 101 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

14. .github/workflows/distribute-client-workflow.yml — line 106 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

15. .github/workflows/distribute-client-workflow.yml — line 197 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

16. .github/workflows/distribute-client-workflow.yml — line 209 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

17. .github/workflows/distribute-client-workflow.yml — line 212 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

18. .github/workflows/get-enabled-workflows.yml — line 32 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

19. .github/workflows/get-enabled-workflows.yml — line 45 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

20. .github/workflows/gh-aw-agent-suggestions.yml — line 16 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses) | zizmor [secrets-inherit]: secrets unconditionally inherited by called workflow (https://docs.zizmor.sh/audits/#secrets-inherit)

21. .github/workflows/gh-aw-autodoc.yml — line 18 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses) | zizmor [secrets-inherit]: secrets unconditionally inherited by called workflow (https://docs.zizmor.sh/audits/#secrets-inherit)

22. .github/workflows/gh-aw-autodoc.yml — line 52 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses) | zizmor [secrets-inherit]: secrets unconditionally inherited by called workflow (https://docs.zizmor.sh/audits/#secrets-inherit)

23. .github/workflows/gh-aw-automerge.yml — line 29 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

24. .github/workflows/gh-aw-automerge.yml — line 37 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

25. .github/workflows/gh-aw-automerge.yml — line 49 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

26. .github/workflows/gh-aw-automerge.yml — line 74 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

27. .github/workflows/gh-aw-automerge.yml — line 140 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

28. .github/workflows/gh-aw-dependency-review.yml — line 24 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

29. .github/workflows/gh-aw-dependency-review.yml — line 74 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

30. .github/workflows/gh-aw-dependency-review.yml — line 77 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

31. .github/workflows/gh-aw-duplicate-issue-detector.yml — line 17 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

32. .github/workflows/gh-aw-issue-fixer.yml — line 22 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses) | zizmor [secrets-inherit]: secrets unconditionally inherited by called workflow (https://docs.zizmor.sh/audits/#secrets-inherit)

33. .github/workflows/gh-aw-issue-triage.yml — line 18 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

34. .github/workflows/gh-aw-mention-in-issue.yml — line 20 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

35. .github/workflows/gh-aw-resource-not-accessible-by-integration-detector.yml — line 36 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses) | zizmor [secrets-inherit]: secrets unconditionally inherited by called workflow (https://docs.zizmor.sh/audits/#secrets-inherit)

36. .github/workflows/gh-aw-resource-not-accessible-by-integration-fixer.yml — line 22 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses) | zizmor [secrets-inherit]: secrets unconditionally inherited by called workflow (https://docs.zizmor.sh/audits/#secrets-inherit)

37. .github/workflows/gh-aw-resource-not-accessible-by-integration-triage.yml — line 27 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

38. .github/workflows/gh-aw-resource-not-accessible-by-integration-triage.yml — line 232 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

39. .github/workflows/gh-aw-resource-not-accessible-by-integration-triage.yml — line 235 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

40. .github/workflows/gh-aw-security-detector.yml — line 19 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

41. .github/workflows/gh-aw-security-detector.yml — line 25 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

42. .github/workflows/gh-aw-security-detector.yml — line 36 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

43. .github/workflows/gh-aw-security-detector.yml — line 51 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

44. .github/workflows/gh-aw-security-fixer.yml — line 22 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses) | zizmor [secrets-inherit]: secrets unconditionally inherited by called workflow (https://docs.zizmor.sh/audits/#secrets-inherit)

45. .github/workflows/gh-aw-security-triage.yml — line 26 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

46. .github/workflows/gh-aw-security-triage.yml — line 121 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

47. .github/workflows/gh-aw-security-triage.yml — line 124 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

48. .github/workflows/load-allowed-authors.yml — line 37 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

49. .github/workflows/oblt-aw.yml — line 27 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

50. .github/workflows/sync-control-plane-dashboard.yml — line 30 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

51. .github/workflows/sync-control-plane-dashboard.yml — line 33 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

52. .github/workflows/sync-control-plane-dashboard.yml — line 65 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

53. .github/workflows/sync-control-plane-dashboard.yml — line 69 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

54. .github/workflows/sync-control-plane-dashboard.yml — line 74 — medium — zizmor [unpinned-uses]: unpinned action reference (https://docs.zizmor.sh/audits/#unpinned-uses)

---

Generated by oblt-aw security detector. Rules: security-scanning-ruleset (SEC-001–SEC-044, aligned with observability-robots#3758).

[github-actions]

tl;dr: This is a valid SEC-030 supply-chain finding. The repo contains mutable uses: refs (tag, branch, and floating refs), so remediation should pin to immutable SHAs and mark this issue fix-ready.

Recommendation

Classify as oblt-aw/triage/security-supply-chain and proceed with a repo-wide immutable-pin update for workflow action/reusable-workflow refs.

Findings

1. SEC-030 policy requires immutable pinning.

   • docs/workflows/security-scanning-ruleset.md:195-203

2. Concrete mutable refs found in workflows:

   • .github/workflows/gh-aw-security-detector.yml:51

     uses: elastic/oblt-actions/github/create-token (ref v1)

   • .github/workflows/gh-aw-resource-not-accessible-by-integration-detector.yml:36

     uses: elastic/ai-github-actions/.github/workflows/gh-aw-log-searching-agent.lock.yml (branch ref copilot/log-searching-agent-preflight)

3. Detector mapping confirms SEC-030 coverage for unpinned/ref-integrity signals.

   • scripts/security-scan.sh:105-110

4. Related issue/PR body lookup was attempted but blocked by integrity filtering in this runtime.

Verification

git --no-pager grep -nE "uses:\s+[^[:space:]]+@(main|master|v[0-9]+(\.[0-9]+)?)$|uses:\s+[^[:space:]]+`@copilot`/" -- .github/workflows/*.yml

Key output lines:

.github/workflows/gh-aw-security-detector.yml:51: uses: elastic/oblt-actions/github/create-token@v1
.github/workflows/gh-aw-resource-not-accessible-by-integration-detector.yml:36: uses: elastic/ai-github-actions/.github/workflows/gh-aw-log-searching-agent.lock.yml@copilot/log-searching-agent-preflight
.github/workflows/gh-aw-security-triage.yml:26: uses: elastic/ai-github-actions/.github/workflows/gh-aw-issue-triage.lock.yml@main

Detailed Action Plan

1. Inventory all uses: refs in .github/workflows/*.yml and classify each as pin-required vs documented exception.
2. Replace mutable refs (floating tags, branch refs, moving named refs) with full commit SHAs.
3. Keep upgrade traceability by documenting source refs used to derive each SHA.
4. Re-run SEC-030 detection and confirm findings are reduced to intended exceptions only.
5. Update security docs to make exceptions explicit and auditable.

Resolution Plan

Root Cause

• Mutable refs are used in workflow uses: statements instead of immutable SHAs.
• Examples:
  • .github/workflows/gh-aw-security-detector.yml:51
  • .github/workflows/gh-aw-resource-not-accessible-by-integration-detector.yml:36
• Mutable refs permit ref drift/retargeting, changing executed code without a repo change in this project.

Risk Assessment

• Severity: medium
• Impact: supply-chain integrity risk from unintended workflow/action revisions.
• Affected workflows: at least the files above; scan output shows additional mutable refs.

Remediation Steps

1. Pin third-party and reusable workflow refs to full SHAs.
2. Preserve least-privilege permissions while updating refs.
3. Document any explicit policy exceptions.
4. Keep SEC-030 checks enforced to block regressions.
5. Establish periodic SHA refresh process.

Before / After Examples

Before (vulnerable):

uses: <org>/<repo>/<action-or-workflow> (floating ref)

After (remediated):

uses: <org>/<repo>/<action-or-workflow> (full commit SHA)

Success Criteria

• No secrets or tokens exposed in command strings or logs
• Env indirection used for secrets where applicable
• Permissions minimized per job
• Actions pinned with SHA where required
• Documentation updated with security requirements

Additional Resources

• GitHub Actions Security Hardening
• Workflow Permission Syntax

Related Items

Type	Link / Location	Relevance
File	docs/workflows/security-scanning-ruleset.md:195-203	SEC-030 policy definition
File	.github/workflows/gh-aw-security-detector.yml:51	Mutable ref pattern
File	.github/workflows/gh-aw-resource-not-accessible-by-integration-detector.yml:36	Mutable branch ref pattern
File	scripts/security-scan.sh:105-110	SEC-030 detector mapping

Note

🔒 Integrity filter blocked 19 items

The following items were blocked because they don't meet the GitHub integrity level.

• #830 issue_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #663 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #676 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #106 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #142 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #109 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #108 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #107 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #830 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #820 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #812 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #801 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #790 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #778 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #769 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #762 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• ... and 3 more items

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

---

What is this? | From workflow: Observability Agentic Workflow Entrypoint

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

[github-actions]

tl;dr: I could not execute the fixer plan for this issue in this run because issue content (body/comments/labels) is blocked by integrity policy, so preconditions and the triage plan could not be read; repository evidence still shows active SEC-030 style unpinned action references that should be remediated by immutable SHA pinning.

Recommendation

Re-run this fixer with approved-integrity access to issue #830 so the existing triage resolution plan can be executed in order. After that, replace tag/branch action refs with full 40-char SHAs in the exact files/lines specified by the plan.

Findings

Repository evidence

SEC-030 policy requires immutable pinning:

• docs/workflows/security-scanning-ruleset.md:195-203

Examples of non-SHA workflow refs currently in repo:

• .github/workflows/ci.yml:29 (elastic/oblt-actions/pre-commit, ref v1)
• .github/workflows/ci.yml:41 (actions/checkout, ref v6)
• .github/workflows/ci.yml:44 (actions/setup-python, ref v6)
• .github/workflows/ci.yml:49 (actions/cache, ref v5)
• .github/workflows/ci.yml:126 (elastic/oblt-actions/check-dependent-jobs, ref v1)
• .github/workflows/gh-aw-security-fixer.yml:22 (elastic/ai-github-actions/..., ref main)
• .github/workflows/gh-aw-resource-not-accessible-by-integration-detector.yml:36 (elastic/ai-github-actions/..., branch ref)

Related SEC-030 history discovered in searchable issue data (closed):
#595, #594, #593, #592, #590, #589, #588, #586, #524.

Direct read of issue #830 remained unavailable in this run due integrity filtering.

Verification

Commands and outputs

./scripts/security-scan.sh .

scripts/install_security_detector_tools.sh|21|SEC-032|high|Download via curl/wget without obvious checksum/signature verification in this script.

grep -RInE '^\s*uses:\s*[^#]+' .github/workflows .github/remote-workflow-template | grep -Ev '@[0-9a-fA-F]{40}(\s|$)'

... (multiple matches)
.github/workflows/ci.yml:29:        uses: elastic/oblt-actions/pre-commit@v1
.github/workflows/ci.yml:41:        uses: actions/checkout@v6
.github/workflows/ci.yml:44:        uses: actions/setup-python@v6
.github/workflows/ci.yml:49:        uses: actions/cache@v5
.github/workflows/ci.yml:126:        uses: elastic/oblt-actions/check-dependent-jobs@v1
.github/workflows/gh-aw-security-fixer.yml:22:    uses: elastic/ai-github-actions/.github/workflows/gh-aw-issue-fixer.lock.yml@main

Detailed Action Plan

Execute when issue access is unblocked

1. Read issue #830 and confirm fixer preconditions: oblt-aw/ai/fix-ready plus exactly one security triage label.
2. Execute the triage resolution plan steps in order.
3. For each targeted file, convert non-immutable uses refs to full commit SHA refs.
4. Preserve least-privilege permissions and env-indirection patterns while applying fixes.
5. Re-run security scan and confirm addressed SEC-030 lines no longer trigger.
6. Open a draft PR with completed-plan checklist and validation evidence.

Related Items

Type	Item	Notes
Issue	#595	Closed SEC-030 (ci.yml line 126)
Issue	#594	Closed SEC-030 (ci.yml line 95)
Issue	#593	Closed SEC-030 (ci.yml line 73)
Issue	#592	Closed SEC-030 (ci.yml line 70)
Issue	#590	Closed SEC-030 (ci.yml line 49)
Issue	#589	Closed SEC-030 (ci.yml line 44)
Issue	#588	Closed SEC-030 (ci.yml line 41)
Issue	#586	Closed SEC-030 (ci.yml line 29)
File	docs/workflows/security-scanning-ruleset.md	SEC-030 rule definition
File	.github/workflows/ci.yml	Multiple non-SHA uses refs
File	.github/workflows/gh-aw-security-fixer.yml	Reusable workflow uses branch/tag ref
File	.github/workflows/gh-aw-resource-not-accessible-by-integration-detector.yml	Reusable workflow uses branch ref

Note

🔒 Integrity filter blocked 39 items

The following items were blocked because they don't meet the GitHub integrity level.

• #830 issue_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [oblt-aw][security] SEC-030 — findings (2026-05-09) #830 issue_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #663 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #676 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #106 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #142 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #109 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #108 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #107 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #830 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #820 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #812 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #801 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #790 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #778 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #769 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• ... and 23 more items

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

---

What is this? | From workflow: Observability Agentic Workflow Entrypoint

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.