{"profiles":[{"schema_version":"0.1","run":{"profile_id":"019f4547-da57-71a0-81ab-69f0fcbd93a2","run_id":"28995509943","repository":"garnet-labs/openclaw","github_web_origin":"https://github.com","workflow":"CI","job":"checks-fast-core","runner_os":"Linux","runner_arch":"X64","actor":"devin-ai-integration[bot]","start_time":"2026-07-09T05:09:24.685807Z","end_time":"2026-07-09T05:09:24.685807Z","commit_sha":"1d19e70cc4e6ce6db74bb6b021700e2c9b3f3664","ref":"refs/pull/25/merge","agent_id":"c9996774-b190-4701-bc98-0f8cda0bcdcb"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow"],"protocol":"TCP","remote_address":"104.16.0.34","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/pnpm install --prefer-offline --ignore-scripts=false --config.engine-strict=false --config.enable-pre-post-scripts=true --config.side-effects-cache=true --frozen-lockfile"},{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow"],"protocol":"TCP","remote_address":"104.16.2.34","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/corepack prepare pnpm@11.2.2+sha512.36e6621fad506178936455e70247b8808ef4ec25797a9f437a93281a020484e2607f6a469a22e982987c3dbb8866e3071514ab10a4a1 --activate"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/corepack prepare pnpm@11.2.2+sha512.36e6621fad506178936455e70247b8808ef4ec25797a9f437a93281a020484e2607f6a469a22e982987c3dbb8866e3071514ab10a4a1 --activate"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/pnpm install --prefer-offline --ignore-scripts=false --config.engine-strict=false --config.enable-pre-post-scripts=true --config.side-effects-cache=true --frozen-lockfile"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"localhost","process":"provjobd1271435","ancestry":["systemd","hosted-compute-","sudo","provjobd1271435"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"glb-db52c2cf8be544.github.com","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.112.22","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"glb-db52c2cf8be544.github.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.112.22","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"results-receiver.actions.githubusercontent","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.112.22","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"results-receiver.actions.githubusercontent","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.112.22","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.store.core.windows.net","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.store.core.windows.net","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.trafficmanager.net","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.trafficmanager.net","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"productionresultssa18.blob.core.windows","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"productionresultssa18.blob.core.windows","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"}],"total_domains":7,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION","details":"A process contacted a bad network domain.","evidence":[],"assertion_id":"no_bad_egress_domain","class":"Network Egress","class_id":"Network Egress"},{"id":"no_binary_execution_and_deletion","result":"PASS","details":"A program was executed, and then its file was deleted.","evidence":[],"assertion_id":"no_binary_execution_and_deletion","class":"Stealth","class_id":"Stealth"},{"id":"no_code_injection_via_proc_memory","result":"PASS","details":"A process initiated code injection via /proc/{pid}/mem access.","evidence":[],"assertion_id":"no_code_injection_via_proc_memory","class":"Privilege Escalation","class_id":"Privilege Escalation"}],"telemetry":{"total_events":16,"total_connections":16,"unique_domains":7},"score":null,"workload_identity":null,"filesystem":null,"execution":null},{"schema_version":"0.1","run":{"profile_id":"019f4547-d51b-73bb-9335-e617b9775a8e","run_id":"28995509943","repository":"garnet-labs/openclaw","github_web_origin":"https://github.com","workflow":"CI","job":"checks-fast-core","runner_os":"Linux","runner_arch":"X64","actor":"devin-ai-integration[bot]","start_time":"2026-07-09T05:09:23.336048Z","end_time":"2026-07-09T05:09:23.336048Z","commit_sha":"1d19e70cc4e6ce6db74bb6b021700e2c9b3f3664","ref":"refs/pull/25/merge","agent_id":"321da3c4-f794-4942-bde9-858e68f294e3"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"bash","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","bash"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","exec_from_unusual_dir"],"protocol":"TCP","remote_address":"104.16.0.34","result":"attention","process_detail":"/usr/bin/bash --noprofile --norc -e -o pipefail /home/runner/work/_temp/716ccbdf-bf39-49ae-9638-435d71b7965f.sh"},{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"104.16.10.34","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/corepack prepare pnpm@11.2.2+sha512.36e6621fad506178936455e70247b8808ef4ec25797a9f437a93281a020484e2607f6a469a22e982987c3dbb8866e3071514ab10a4a1 --activate"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/corepack prepare pnpm@11.2.2+sha512.36e6621fad506178936455e70247b8808ef4ec25797a9f437a93281a020484e2607f6a469a22e982987c3dbb8866e3071514ab10a4a1 --activate"},{"domain":"localhost","process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"bash","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","bash"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/usr/bin/bash --noprofile --norc -e -o pipefail /home/runner/work/_temp/716ccbdf-bf39-49ae-9638-435d71b7965f.sh"},{"domain":"localhost","process":"provjobd7143505","ancestry":["systemd","hosted-compute-","sudo","provjobd7143505"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"Runner.Worker","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"glb-db52c2cf8be544.github.com","process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.114.21","result":"attention"},{"domain":"glb-db52c2cf8be544.github.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.114.21","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"results-receiver.actions.githubusercontent","process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.114.21","result":"attention"},{"domain":"results-receiver.actions.githubusercontent","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.114.21","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.store.core.windows.net","process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention"},{"domain":"blob.bn9prdstrz04a.store.core.windows.net","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.trafficmanager.net","process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention"},{"domain":"blob.bn9prdstrz04a.trafficmanager.net","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"productionresultssa18.blob.core.windows","process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention"},{"domain":"productionresultssa18.blob.core.windows","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"ip6-allrouters","process":"systemd-network","ancestry":["systemd","systemd-network"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"ICMPV6","remote_address":"ff02::2","result":"pass"}],"total_domains":8,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION","details":"A process contacted a bad network domain.","evidence":[],"assertion_id":"no_bad_egress_domain","class":"Network Egress","class_id":"Network Egress"},{"id":"no_binary_execution_and_deletion","result":"PASS","details":"A program was executed, and then its file was deleted.","evidence":[],"assertion_id":"no_binary_execution_and_deletion","class":"Stealth","class_id":"Stealth"},{"id":"no_code_injection_via_proc_memory","result":"PASS","details":"A process initiated code injection via /proc/{pid}/mem access.","evidence":[],"assertion_id":"no_code_injection_via_proc_memory","class":"Privilege Escalation","class_id":"Privilege Escalation"}],"telemetry":{"total_events":17,"total_connections":17,"unique_domains":8},"score":null,"workload_identity":null,"filesystem":null,"execution":null},{"schema_version":"0.1","run":{"profile_id":"019f4547-3f32-7e95-b6bc-5f1414eb5b95","run_id":"28995509943","repository":"garnet-labs/openclaw","github_web_origin":"https://github.com","workflow":"CI","job":"security-fast","runner_os":"Linux","runner_arch":"X64","actor":"devin-ai-integration[bot]","start_time":"2026-07-09T05:08:44.96008Z","end_time":"2026-07-09T05:08:44.96008Z","commit_sha":"1d19e70cc4e6ce6db74bb6b021700e2c9b3f3664","ref":"refs/pull/25/merge","agent_id":"c094580c-6104-42e3-851a-a65b34e596e0"},"egress":{"unique_domains":[{"domain":"localhost","process":"git-remote-http","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","git","git","git-remote-http"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/usr/lib/git-core/git-remote-https origin https://github.com/garnet-labs/openclaw.git"},{"domain":"localhost","process":"python3.12","ancestry":["systemd","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/usr/bin/python3 -c from virtualenv.report import setup_report, MAX_LEVEL\nfrom virtualenv.seed.wheels.periodic_update import do_update\nsetup_report"},{"domain":"localhost","process":"git-remote-http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pre-commit","git","git","git-remote-http"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/usr/lib/git-core/git-remote-https origin https://github.com/astral-sh/ruff-pre-commit"},{"domain":"localhost","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pre-commit","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoiar2hsng/py_env-python3.12/bin/python -mpip install ."},{"domain":"localhost","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pre-commit","python3.12","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoahh4sdj_/py_env-python3.12/bin/python /home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoahh4sdj_/py_env-python3.12/lib/python3.12/site-packages install --ignore-installed --no-user --prefix /tmp/pip-build-env-l9cxvkb9/overlay --no-warn-script-location --disable-pip-version-check --no-compile --target"},{"domain":"localhost","process":"python3.12","ancestry":["systemd","python3.12","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/usr/bin/python3 -m pip download --progress-bar off --disable-pip-version-check --only-binary=:all: --no-deps --python-version 3.12 -d /home/runner/.cache/virtualenv/wheel/house pip"},{"domain":"localhost","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"python3 -m pip install --disable-pip-version-check pre-commit==4.2.0"},{"domain":"localhost","process":"provjobd2049833","ancestry":["systemd","hosted-compute-","sudo","provjobd2049833"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"github.com","process":"git-remote-http","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","git","git","git-remote-http"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.4","result":"pass","process_detail":"/usr/lib/git-core/git-remote-https origin https://github.com/garnet-labs/openclaw.git"},{"domain":"github.com","process":"git-remote-http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pre-commit","git","git","git-remote-http"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.4","result":"pass","process_detail":"/usr/lib/git-core/git-remote-https origin https://github.com/astral-sh/ruff-pre-commit"},{"domain":"files.pythonhosted.org","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","code_on_the_fly"],"protocol":"TCP","remote_address":"151.101.0.223","result":"attention","process_detail":"python3 -m pip install --disable-pip-version-check pre-commit==4.2.0"},{"domain":"dualstack.python.map.fastly.net","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","code_on_the_fly"],"protocol":"TCP","remote_address":"151.101.0.223","result":"attention","process_detail":"python3 -m pip install --disable-pip-version-check pre-commit==4.2.0"},{"domain":"dualstack.python.map.fastly.net","process":"python3.12","ancestry":["systemd","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"TCP","remote_address":"151.101.128.223","result":"attention","process_detail":"/usr/bin/python3 -c from virtualenv.report import setup_report, MAX_LEVEL\nfrom virtualenv.seed.wheels.periodic_update import do_update\nsetup_report"},{"domain":"dualstack.python.map.fastly.net","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pre-commit","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"TCP","remote_address":"151.101.128.223","result":"attention","process_detail":"/home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoiar2hsng/py_env-python3.12/bin/python -mpip install ."},{"domain":"files.pythonhosted.org","process":"python3.12","ancestry":["systemd","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"TCP","remote_address":"151.101.128.223","result":"attention","process_detail":"/usr/bin/python3 -c from virtualenv.report import setup_report, MAX_LEVEL\nfrom virtualenv.seed.wheels.periodic_update import do_update\nsetup_report"},{"domain":"files.pythonhosted.org","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pre-commit","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["code_on_the_fly","flow"],"protocol":"TCP","remote_address":"151.101.128.223","result":"attention","process_detail":"/home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoiar2hsng/py_env-python3.12/bin/python -mpip install ."},{"domain":"dualstack.python.map.fastly.net","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pre-commit","python3.12","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"151.101.192.223","result":"pass","process_detail":"/home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoahh4sdj_/py_env-python3.12/bin/python /home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoahh4sdj_/py_env-python3.12/lib/python3.12/site-packages install --ignore-installed --no-user --prefix /tmp/pip-build-env-l9cxvkb9/overlay --no-warn-script-location --disable-pip-version-check --no-compile --target"},{"domain":"files.pythonhosted.org","process":"python3.12","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pre-commit","python3.12","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"151.101.192.223","result":"pass","process_detail":"/home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoahh4sdj_/py_env-python3.12/bin/python /home/runner/work/openclaw/openclaw/.cache/pre-commit-security-fast/repoahh4sdj_/py_env-python3.12/lib/python3.12/site-packages install --ignore-installed --no-user --prefix /tmp/pip-build-env-l9cxvkb9/overlay --no-warn-script-location --disable-pip-version-check --no-compile --target"},{"domain":"dualstack.python.map.fastly.net","process":"python3.12","ancestry":["systemd","python3.12","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"151.101.64.223","result":"pass","process_detail":"/usr/bin/python3 -m pip download --progress-bar off --disable-pip-version-check --only-binary=:all: --no-deps --python-version 3.12 -d /home/runner/.cache/virtualenv/wheel/house pip"},{"domain":"files.pythonhosted.org","process":"python3.12","ancestry":["systemd","python3.12","python3.12"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"151.101.64.223","result":"pass","process_detail":"/usr/bin/python3 -m pip download --progress-bar off --disable-pip-version-check --only-binary=:all: --no-deps --python-version 3.12 -d /home/runner/.cache/virtualenv/wheel/house pip"}],"total_domains":4,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION","details":"A process contacted a bad network domain.","evidence":[],"assertion_id":"no_bad_egress_domain","class":"Network Egress","class_id":"Network Egress"},{"id":"no_binary_execution_and_deletion","result":"PASS","details":"A program was executed, and then its file was deleted.","evidence":[],"assertion_id":"no_binary_execution_and_deletion","class":"Stealth","class_id":"Stealth"},{"id":"no_code_injection_via_proc_memory","result":"PASS","details":"A process initiated code injection via /proc/{pid}/mem access.","evidence":[],"assertion_id":"no_code_injection_via_proc_memory","class":"Privilege Escalation","class_id":"Privilege Escalation"}],"telemetry":{"total_events":7,"total_connections":7,"unique_domains":4},"score":null,"workload_identity":null,"filesystem":null,"execution":null}],"count":3,"profile":{"schema_version":"0.1","run":{"profile_id":"019f4547-da57-71a0-81ab-69f0fcbd93a2","run_id":"28995509943","repository":"garnet-labs/openclaw","github_web_origin":"https://github.com","workflow":"CI","job":"checks-fast-core","runner_os":"Linux","runner_arch":"X64","actor":"devin-ai-integration[bot]","start_time":"2026-07-09T05:09:24.685807Z","end_time":"2026-07-09T05:09:24.685807Z","commit_sha":"1d19e70cc4e6ce6db74bb6b021700e2c9b3f3664","ref":"refs/pull/25/merge","agent_id":"c9996774-b190-4701-bc98-0f8cda0bcdcb"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow"],"protocol":"TCP","remote_address":"104.16.0.34","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/pnpm install --prefer-offline --ignore-scripts=false --config.engine-strict=false --config.enable-pre-post-scripts=true --config.side-effects-cache=true --frozen-lockfile"},{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow"],"protocol":"TCP","remote_address":"104.16.2.34","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/corepack prepare pnpm@11.2.2+sha512.36e6621fad506178936455e70247b8808ef4ec25797a9f437a93281a020484e2607f6a469a22e982987c3dbb8866e3071514ab10a4a1 --activate"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/corepack prepare pnpm@11.2.2+sha512.36e6621fad506178936455e70247b8808ef4ec25797a9f437a93281a020484e2607f6a469a22e982987c3dbb8866e3071514ab10a4a1 --activate"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"node /opt/hostedtoolcache/node/24.18.0/x64/bin/pnpm install --prefer-offline --ignore-scripts=false --config.engine-strict=false --config.enable-pre-post-scripts=true --config.side-effects-cache=true --frozen-lockfile"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"localhost","process":"provjobd1271435","ancestry":["systemd","hosted-compute-","sudo","provjobd1271435"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["credentials_files_access","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"glb-db52c2cf8be544.github.com","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.112.22","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"glb-db52c2cf8be544.github.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.112.22","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"results-receiver.actions.githubusercontent","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.112.22","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"results-receiver.actions.githubusercontent","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.112.22","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.store.core.windows.net","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.store.core.windows.net","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.trafficmanager.net","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"blob.bn9prdstrz04a.trafficmanager.net","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"productionresultssa18.blob.core.windows","process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"},{"domain":"productionresultssa18.blob.core.windows","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"20.150.82.228","result":"attention","process_detail":"/home/runner/actions-runner/cached/2.335.1/externals/node24/bin/node /home/runner/work/_actions/actions/cache/27d5ce7f107fe9357f9df03efb73ab90386fccae/restore/../dist/restore-only/index.js"}],"total_domains":7,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION","details":"A process contacted a bad network domain.","evidence":[],"assertion_id":"no_bad_egress_domain","class":"Network Egress","class_id":"Network Egress"},{"id":"no_binary_execution_and_deletion","result":"PASS","details":"A program was executed, and then its file was deleted.","evidence":[],"assertion_id":"no_binary_execution_and_deletion","class":"Stealth","class_id":"Stealth"},{"id":"no_code_injection_via_proc_memory","result":"PASS","details":"A process initiated code injection via /proc/{pid}/mem access.","evidence":[],"assertion_id":"no_code_injection_via_proc_memory","class":"Privilege Escalation","class_id":"Privilege Escalation"}],"telemetry":{"total_events":16,"total_connections":16,"unique_domains":7},"score":null,"workload_identity":null,"filesystem":null,"execution":null}}