{"profiles":[{"schema_version":"0.1","run":{"profile_id":"019f487d-8604-7e5c-bb62-295157d2e305","run_id":"29046700479","repository":"garnet-org/action","github_web_origin":"https://github.com","workflow":"CI","job":"build-and-verify","runner_os":"Linux","runner_arch":"X64","actor":"devin-ai-integration[bot]","start_time":"2026-07-09T20:06:53.690752Z","end_time":"2026-07-09T20:06:53.690752Z","commit_sha":"6aa026a40c1fcd39c0c472b943c7fad6a2da9c51","ref":"refs/pull/99/merge","agent_id":"987b6835-bf6c-41e1-9d18-3facdc5a0a23"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"104.16.10.34","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"provjobd2162555648","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2162555648"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"hosted-compute-watchdog-prod-iad-02.githubapp","process":"provjobd2162555648","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2162555648"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.23","result":"pass"},{"domain":"glb-2a3c35-public-internal.githubapp.com","process":"provjobd2162555648","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2162555648"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.23","result":"pass"},{"domain":"api.github.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.116.5","result":"attention"}],"total_domains":5,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION","details":"A process contacted a bad network domain.","evidence":[],"assertion_id":"no_bad_egress_domain","class":"Network Egress","class_id":"Network Egress"},{"id":"no_binary_execution_and_deletion","result":"PASS","details":"A program was executed, and then its file was deleted.","evidence":[],"assertion_id":"no_binary_execution_and_deletion","class":"Stealth","class_id":"Stealth"},{"id":"no_code_injection_via_proc_memory","result":"PASS","details":"A process initiated code injection via /proc/{pid}/mem access.","evidence":[],"assertion_id":"no_code_injection_via_proc_memory","class":"Privilege Escalation","class_id":"Privilege Escalation"}],"telemetry":{"total_events":4,"total_connections":4,"unique_domains":5},"score":null,"workload_identity":null,"filesystem":null,"execution":null}],"count":1,"profile":{"schema_version":"0.1","run":{"profile_id":"019f487d-8604-7e5c-bb62-295157d2e305","run_id":"29046700479","repository":"garnet-org/action","github_web_origin":"https://github.com","workflow":"CI","job":"build-and-verify","runner_os":"Linux","runner_arch":"X64","actor":"devin-ai-integration[bot]","start_time":"2026-07-09T20:06:53.690752Z","end_time":"2026-07-09T20:06:53.690752Z","commit_sha":"6aa026a40c1fcd39c0c472b943c7fad6a2da9c51","ref":"refs/pull/99/merge","agent_id":"987b6835-bf6c-41e1-9d18-3facdc5a0a23"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"104.16.10.34","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"provjobd2162555648","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2162555648"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"hosted-compute-watchdog-prod-iad-02.githubapp","process":"provjobd2162555648","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2162555648"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.23","result":"pass"},{"domain":"glb-2a3c35-public-internal.githubapp.com","process":"provjobd2162555648","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2162555648"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.114.23","result":"pass"},{"domain":"api.github.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"status":"ok","reason":null,"event_ids":[],"detections":["flow","interpreter_shell_spawn"],"protocol":"TCP","remote_address":"140.82.116.5","result":"attention"}],"total_domains":5,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION","details":"A process contacted a bad network domain.","evidence":[],"assertion_id":"no_bad_egress_domain","class":"Network Egress","class_id":"Network Egress"},{"id":"no_binary_execution_and_deletion","result":"PASS","details":"A program was executed, and then its file was deleted.","evidence":[],"assertion_id":"no_binary_execution_and_deletion","class":"Stealth","class_id":"Stealth"},{"id":"no_code_injection_via_proc_memory","result":"PASS","details":"A process initiated code injection via /proc/{pid}/mem access.","evidence":[],"assertion_id":"no_code_injection_via_proc_memory","class":"Privilege Escalation","class_id":"Privilege Escalation"}],"telemetry":{"total_events":4,"total_connections":4,"unique_domains":5},"score":null,"workload_identity":null,"filesystem":null,"execution":null}}