Add protected enclave entry diagnostics

.github/workflows/supply-chain-scan.yml

@@ -57,10 +57,30 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@2a78d04403fdc6907d0f05327cffac9dbad5312d # v0.87.5
+      - name: Checkout enclave-compatible gh-aw compiler
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: github/gh-aw
+          ref: 1cf55bdc4f19e5f371b1e7fe888df649695ee48a
+          path: .tmp/gh-aw-compiler
+          persist-credentials: false
+
+      - name: Set up Go
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          version: v0.87.5
+          go-version-file: .tmp/gh-aw-compiler/go.mod
+          cache: false
+
+      - name: Install enclave-compatible gh-aw
+        run: |
+          mkdir -p "$HOME/.local/share/gh/extensions/gh-aw"
+          go build \
+            -C .tmp/gh-aw-compiler \
+            -ldflags="-X main.version=v0.87.5-108-g1cf55bdc4f -X main.isRelease=true" \
+            -o "$HOME/.local/share/gh/extensions/gh-aw/gh-aw" \
+            ./cmd/gh-aw
+          rm -rf .tmp/gh-aw-compiler
+          gh aw version
 
       - name: Compile + generate SBOMs (Syft)
         env:

.grype.yaml

@@ -10,34 +10,6 @@
 # Format reference: https://github.com/anchore/grype?tab=readme-ov-file#configuration
 
 ignore:
-  # ── OpenSSL 3.5.7 QUIC server listener DoS ──────────────────────────────────
-  #
-  # CVE-2026-14456 (OpenSSL QUIC server pending-connection queue, HIGH):
-  #   The affected path exists only in OpenSSL's QUIC server listener, where
-  #   valid Initial packets can create unbounded pending connection objects.
-  #
-  #   Risk acceptance — NOT REACHABLE in AWF images:
-  #     The affected images use libssl for client-side HTTPS/TLS or conventional
-  #     TCP servers. They do not create OpenSSL QUIC listeners or expose UDP
-  #     services, so attacker-controlled QUIC Initial packets cannot reach the
-  #     vulnerable listener path.
-  #
-  #   No fixed Alpine 3.24 package is available today: libcrypto3/libssl3
-  #   3.5.7-r0 is current and Grype reports no fixed package. Revisit when
-  #   Alpine publishes OpenSSL >= 3.5.8, then rebuild the images and delete
-  #   these version-scoped exceptions.
-  #   Advisory: https://security.alpinelinux.org/vuln/CVE-2026-14456
-  - vulnerability: CVE-2026-14456
-    package:
-      name: libcrypto3
-      version: "3.5.7-r0"
-      type: apk
-  - vulnerability: CVE-2026-14456
-    package:
-      name: libssl3
-      version: "3.5.7-r0"
-      type: apk
-
   # ── Node.js 22.23.2 Permission Model false positive ───────────────────────────
   #
   # CVE-2026-58043 (Node.js Permission Model path matching, HIGH):

containers/api-proxy/Dockerfile

@@ -2,8 +2,9 @@
 # Routes through Squid to respect domain whitelisting
 FROM node:22.23.2-alpine3.24
 
-# Install curl for healthchecks (>=8.21.0-r0 to fix CVE in 8.20.x)
-RUN apk add --no-cache "curl>=8.21.0-r0"
+# Install current Alpine security updates and curl for healthchecks.
+RUN apk upgrade --no-cache \
+    && apk add --no-cache "curl>=8.21.0-r0"
 
 # Replace the vulnerable npm 10.x bundled with Node 22.23.2 with npm 11.18.0.
 # npm 11.18.0 bundles: tar 7.5.19 (fixes GHSA-23hp-3jrh-7fpw/GHSA-8x88-c5mf-7j5w),

containers/cli-proxy/Dockerfile

@@ -26,10 +26,11 @@ FROM node:22.23.2-alpine3.24
 # (Alpine 3.24 ships 8.20.0-r1 by default; the constraint forces the patched build).
 # The alpine community repo includes github-cli — we replace it below with the
 # official release binary to control the exact Go toolchain and module versions.
-RUN apk add --no-cache \
-    "curl>=8.21.0-r0" \
-    ca-certificates \
-    bash
+RUN apk upgrade --no-cache \
+    && apk add --no-cache \
+        "curl>=8.21.0-r0" \
+        ca-certificates \
+        bash
 
 # Build the pinned GitHub CLI release with the patched Go toolchain.
 COPY --from=gh-build /tmp/cli-2.97.0/bin/gh /usr/local/bin/gh

containers/enclave/Dockerfile

@@ -2,7 +2,8 @@
 
 FROM python:3.14.7-alpine3.24 AS enclave-script
 
-RUN python3 -c 'import json, pathlib, sys; sys.exit(0)' \
+RUN apk upgrade --no-cache \
+    && python3 -c 'import json, pathlib, sys; sys.exit(0)' \
     && test -x /usr/local/bin/python3 \
     && rm -f /sbin/apk
 COPY enclave/script-entrypoint.py /usr/local/bin/run-enclave-script
@@ -47,7 +48,8 @@ RUN chmod 0555 /usr/local/bin/run-enclave-agent /usr/local/bin/gh \
 
 FROM node:22.23.2-alpine3.24 AS enclave-mcp-server
 
-RUN apk add --no-cache docker-cli \
+RUN apk upgrade --no-cache \
+    && apk add --no-cache docker-cli \
     && test -x /usr/bin/docker \
     && rm -rf /usr/local/lib/node_modules/npm \
     && rm -f /usr/local/bin/npm /usr/local/bin/npx /usr/local/bin/corepack