{"profiles":[{"schema_version":"runtime-review-public/v3","timestamp":"2026-08-06T15:43:54.456910595Z","run":{"profile_id":"019fd7be-d4e5-7229-b515-7ffae9c4d5f7","run_id":"31116746143","repository":"aleesikander/flask","workflow":"Garnet Flask Baseline","job":"baseline","commit_sha":"3e4c008705ce6385764a94516719ef1c64cd0391","ref":"refs/pull/1/merge"},"associations":[{"remote_address":"104.26.13.77","remote_names":["releases.astral.sh"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2799,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":0,"detections":["dynamic_linker_attacks","interpreter_shell_spawn"]},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2799,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":1,"detections":["dynamic_linker_attacks","exec_from_unusual_dir","interpreter_shell_spawn"]},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2823,"process":"uv","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"4. Install locked test dependencies","flow_id":1,"detections":["dynamic_linker_attacks","exec_from_unusual_dir","interpreter_shell_spawn"]},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2863,"process":"python3.12","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","python3.12"],"github_step":"6. Controlled long-lived direct Python HTTPS request","flow_id":1,"detections":["dynamic_linker_attacks","exec_from_unusual_dir","interpreter_shell_spawn"]},{"remote_address":"140.82.114.23","remote_names":["140.82.114.23"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2050,"process":"provjobd1127515438","ancestry":["systemd","hosted-compute-agent","sudo","provjobd1127515438"],"github_step":"99. Runner Processes","flow_id":2},{"remote_address":"151.101.0.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2823,"process":"uv","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"4. Install locked test dependencies","flow_id":3,"detections":["exec_from_unusual_dir"]},{"remote_address":"151.101.128.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2823,"process":"uv","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"4. Install locked test dependencies","flow_id":4,"detections":["exec_from_unusual_dir"]},{"remote_address":"168.63.129.16","remote_names":["168.63.129.16"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":556,"process":"systemd-resolved","ancestry":["systemd","systemd-resolved"],"github_step":"99. Runner Processes","flow_id":5},{"remote_address":"168.63.129.16","remote_names":["168.63.129.16"],"remote_ports":["32526","80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":1384,"process":"python3.12","ancestry":["systemd","python3.12","python3.12"],"github_step":"99. Runner Processes","flow_id":6},{"remote_address":"169.254.169.254","remote_names":["169.254.169.254"],"remote_ports":["80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":1384,"process":"python3.12","ancestry":["systemd","python3.12","python3.12"],"github_step":"99. Runner Processes","flow_id":7},{"remote_address":"172.66.147.243","remote_names":["example.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2863,"process":"python3.12","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","python3.12"],"github_step":"6. Controlled long-lived direct Python HTTPS request","flow_id":8,"detections":["exec_from_unusual_dir"]},{"remote_address":"185.199.108.133","remote_names":["raw.githubusercontent.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2799,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":9,"detections":["dynamic_linker_attacks","interpreter_shell_spawn"]}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"},{"id":"no_code_injection_via_proc_memory","result":"FAIL"}]}],"count":1,"profile":{"schema_version":"runtime-review-public/v3","timestamp":"2026-08-06T15:43:54.456910595Z","run":{"profile_id":"019fd7be-d4e5-7229-b515-7ffae9c4d5f7","run_id":"31116746143","repository":"aleesikander/flask","workflow":"Garnet Flask Baseline","job":"baseline","commit_sha":"3e4c008705ce6385764a94516719ef1c64cd0391","ref":"refs/pull/1/merge"},"associations":[{"remote_address":"104.26.13.77","remote_names":["releases.astral.sh"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2799,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":0,"detections":["dynamic_linker_attacks","interpreter_shell_spawn"]},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2799,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":1,"detections":["dynamic_linker_attacks","exec_from_unusual_dir","interpreter_shell_spawn"]},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2823,"process":"uv","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"4. Install locked test dependencies","flow_id":1,"detections":["dynamic_linker_attacks","exec_from_unusual_dir","interpreter_shell_spawn"]},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2863,"process":"python3.12","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","python3.12"],"github_step":"6. Controlled long-lived direct Python HTTPS request","flow_id":1,"detections":["dynamic_linker_attacks","exec_from_unusual_dir","interpreter_shell_spawn"]},{"remote_address":"140.82.114.23","remote_names":["140.82.114.23"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2050,"process":"provjobd1127515438","ancestry":["systemd","hosted-compute-agent","sudo","provjobd1127515438"],"github_step":"99. Runner Processes","flow_id":2},{"remote_address":"151.101.0.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2823,"process":"uv","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"4. Install locked test dependencies","flow_id":3,"detections":["exec_from_unusual_dir"]},{"remote_address":"151.101.128.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2823,"process":"uv","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"4. Install locked test dependencies","flow_id":4,"detections":["exec_from_unusual_dir"]},{"remote_address":"168.63.129.16","remote_names":["168.63.129.16"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":556,"process":"systemd-resolved","ancestry":["systemd","systemd-resolved"],"github_step":"99. Runner Processes","flow_id":5},{"remote_address":"168.63.129.16","remote_names":["168.63.129.16"],"remote_ports":["32526","80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":1384,"process":"python3.12","ancestry":["systemd","python3.12","python3.12"],"github_step":"99. Runner Processes","flow_id":6},{"remote_address":"169.254.169.254","remote_names":["169.254.169.254"],"remote_ports":["80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":1384,"process":"python3.12","ancestry":["systemd","python3.12","python3.12"],"github_step":"99. Runner Processes","flow_id":7},{"remote_address":"172.66.147.243","remote_names":["example.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2863,"process":"python3.12","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","python3.12"],"github_step":"6. Controlled long-lived direct Python HTTPS request","flow_id":8,"detections":["exec_from_unusual_dir"]},{"remote_address":"185.199.108.133","remote_names":["raw.githubusercontent.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2799,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":9,"detections":["dynamic_linker_attacks","interpreter_shell_spawn"]}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"},{"id":"no_code_injection_via_proc_memory","result":"FAIL"}]}}