{"profiles":[{"schema_version":"runtime-review-public/v3","timestamp":"2026-08-25T23:43:44.138201773Z","run":{"profile_id":"01a03b53-4257-7cb2-9e02-c88c74d8ce93","run_id":"32911012337","repository":"garnet-labs/pnpm","workflow":"TS CI","job":"test","commit_sha":"3e1d4dab847067a95770ac4acd0a849f4fdbcee3","ref":"refs/pull/26/merge"},"associations":[{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4798,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4858,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":0},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":20402,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":0},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4858,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":5487,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"],"github_step":"3. Install pnpm and Node (pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2)","flow_id":1},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6365,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":1},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":1},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":18674,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":1},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":19302,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":1},{"remote_address":"104.16.10.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":2},{"remote_address":"104.16.10.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":2},{"remote_address":"104.16.10.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":20527,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":2},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4798,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"],"github_step":"99. Runner Processes","flow_id":3},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":3},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":3},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14127,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":3},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":24772,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":3},{"remote_address":"104.16.2.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":4},{"remote_address":"104.16.2.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14089,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":4},{"remote_address":"104.16.2.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30561,"process":"pnpr","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":4},{"remote_address":"104.16.212.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":5635,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"],"github_step":"3. Install pnpm and Node (pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2)","flow_id":5},{"remote_address":"104.16.212.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":19674,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":5},{"remote_address":"104.16.213.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4816,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":6},{"remote_address":"104.16.213.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":27362,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":6},{"remote_address":"104.16.213.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":6},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14127,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":24675,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30361,"process":"pnpr","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":18662,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":25026,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":8},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6271,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":9},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":9},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":18712,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":9},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":24532,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":9},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":10},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14115,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":10},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":24432,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":10},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":11},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":9708,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":11},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14127,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":11},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":9708,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":11},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":20467,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":26508,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":29710,"process":"pnpr","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.9.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":13},{"remote_address":"104.16.9.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6667,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":13},{"remote_address":"104.16.9.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6667,"process":"pnpr","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":13},{"remote_address":"104.21.7.32","remote_names":["npm.jsr.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4816,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4789,"process":"sudo","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":5487,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"],"github_step":"3. Install pnpm and Node (pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2)","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":5635,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"],"github_step":"3. Install pnpm and Node (pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2)","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":5967,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4858,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6008,"process":"git-remote-http","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"],"github_step":null,"flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6365,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":9708,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6667,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":14676,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":19302,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":24079,"process":"php8.3","ancestry":["systemd","sessionclean","sessionclean","php8.3"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":24432,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":30184,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":29710,"process":"pnpr","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1769,"process":"snapd","ancestry":["systemd","snapd"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":3841,"process":"Runner.Worker","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":30466,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4858,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6667,"process":"pnpr","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":9708,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"140.82.112.22","remote_names":["glb-db52c2cf8be544.github.com","results-receiver.actions.githubusercontent"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4066,"process":"nginx","ancestry":["systemd","nginx","nginx"],"github_step":"99. Runner Processes","flow_id":16},{"remote_address":"140.82.112.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":16547,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":17},{"remote_address":"140.82.112.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":18379,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":17},{"remote_address":"140.82.113.10","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30160,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":18},{"remote_address":"140.82.113.10","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":18},{"remote_address":"140.82.113.21","remote_names":["140.82.113.21"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4065,"process":"nginx","ancestry":["systemd","nginx","nginx"],"github_step":"99. Runner Processes","flow_id":19},{"remote_address":"140.82.113.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":27666,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":20},{"remote_address":"140.82.113.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30184,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":20},{"remote_address":"140.82.113.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30466,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":20},{"remote_address":"140.82.113.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":20},{"remote_address":"140.82.113.9","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":21},{"remote_address":"140.82.113.9","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":21},{"remote_address":"140.82.113.9","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":27666,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":21},{"remote_address":"140.82.114.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":19289,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":22},{"remote_address":"140.82.114.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6008,"process":"git-remote-http","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"],"github_step":null,"flow_id":23},{"remote_address":"140.82.114.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":23},{"remote_address":"140.82.114.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14655,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":23},{"remote_address":"140.82.114.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14676,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":23},{"remote_address":"140.82.114.9","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14631,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":24},{"remote_address":"169.254.169.123","remote_names":["169.254.169.123"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":25},{"remote_address":"172.233.157.223","remote_names":["172.233.157.223"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":26},{"remote_address":"172.67.135.174","remote_names":["npm.jsr.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":27},{"remote_address":"18.238.96.73","remote_names":["cloudfront.cdn.snapcraftcontent.com","d151fo0aytpgqo.cloudfront.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1769,"process":"snapd","ancestry":["systemd","snapd"],"github_step":"99. Runner Processes","flow_id":28},{"remote_address":"185.125.188.57","remote_names":["api.snapcraft.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1769,"process":"snapd","ancestry":["systemd","snapd"],"github_step":"99. Runner Processes","flow_id":29},{"remote_address":"185.125.188.58","remote_names":["api.snapcraft.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1769,"process":"snapd","ancestry":["systemd","snapd"],"github_step":"99. Runner Processes","flow_id":30},{"remote_address":"185.125.190.56","remote_names":["185.125.190.56"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":31},{"remote_address":"185.125.190.57","remote_names":["185.125.190.57"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":32},{"remote_address":"185.125.190.58","remote_names":["185.125.190.58"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":33},{"remote_address":"192.168.127.1","remote_names":["192.168.127.1"],"remote_ports":["1045","1049"],"protocol":"TCP","lineage_recorded":true,"pid":3902,"process":"blacksmithd","ancestry":["systemd","bash","blacksmithd"],"github_step":"99. Runner Processes","flow_id":34},{"remote_address":"192.168.127.1","remote_names":["192.168.127.1"],"remote_ports":["1045","1049"],"protocol":"TCP","lineage_recorded":true,"pid":2241,"process":"blacksmithd","ancestry":["systemd","sudo","blacksmithd"],"github_step":"99. Runner Processes","flow_id":34},{"remote_address":"208.113.130.146","remote_names":["208.113.130.146"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":35},{"remote_address":"23.150.40.242","remote_names":["23.150.40.242"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":36},{"remote_address":"23.186.168.133","remote_names":["23.186.168.133"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":37},{"remote_address":"45.55.98.129","remote_names":["unofficial-builds.nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4816,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":38},{"remote_address":"45.55.98.129","remote_names":["unofficial-builds.nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":19674,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":38},{"remote_address":"45.55.98.129","remote_names":["unofficial-builds.nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":38},{"remote_address":"57.150.4.193","remote_names":["blob.bnz49prdstrz09a.store.core.windows","blob.bnz49prdstrz09a.trafficmanager.net","productionresultssa8.blob.core.windows.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":5967,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"],"github_step":"99. Runner Processes","flow_id":39},{"remote_address":"8.8.8.8","remote_names":["8.8.8.8"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4065,"process":"nginx","ancestry":["systemd","nginx","nginx"],"github_step":"99. Runner Processes","flow_id":40},{"remote_address":"8.8.8.8","remote_names":["8.8.8.8"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1715,"process":"systemd-resolve","ancestry":["systemd","systemd-resolve"],"github_step":"99. Runner Processes","flow_id":40},{"remote_address":"91.189.91.157","remote_names":["91.189.91.157"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":41}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"}],"annotations":[{"kind":"assertion","id":"no_bad_egress_domain","category":"egress","ancestry":[]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","snapd"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","snapd"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","snapd"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","snapd"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","snapd"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]}]}],"count":1,"profile":{"schema_version":"runtime-review-public/v3","timestamp":"2026-08-25T23:43:44.138201773Z","run":{"profile_id":"01a03b53-4257-7cb2-9e02-c88c74d8ce93","run_id":"32911012337","repository":"garnet-labs/pnpm","workflow":"TS CI","job":"test","commit_sha":"3e1d4dab847067a95770ac4acd0a849f4fdbcee3","ref":"refs/pull/26/merge"},"associations":[{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4798,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4858,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":0},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":20402,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":0},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4858,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":5487,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"],"github_step":"3. Install pnpm and Node (pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2)","flow_id":1},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6365,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":1},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":1},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":18674,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":1},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":19302,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":1},{"remote_address":"104.16.10.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":2},{"remote_address":"104.16.10.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":2},{"remote_address":"104.16.10.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":20527,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":2},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4798,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"],"github_step":"99. Runner Processes","flow_id":3},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":3},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":3},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14127,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":3},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":24772,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":3},{"remote_address":"104.16.2.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":4},{"remote_address":"104.16.2.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14089,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":4},{"remote_address":"104.16.2.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30561,"process":"pnpr","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":4},{"remote_address":"104.16.212.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":5635,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"],"github_step":"3. Install pnpm and Node (pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2)","flow_id":5},{"remote_address":"104.16.212.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":19674,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":5},{"remote_address":"104.16.213.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4816,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":6},{"remote_address":"104.16.213.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":27362,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":6},{"remote_address":"104.16.213.131","remote_names":["nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":6},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14127,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":24675,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30361,"process":"pnpr","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":7},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":18662,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":25026,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":8},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6271,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":9},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":9},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":18712,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":9},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":24532,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":9},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":10},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14115,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":10},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":24432,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":10},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":11},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":9708,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":11},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14127,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":11},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":9708,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":11},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":20467,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":26508,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":29710,"process":"pnpr","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":12},{"remote_address":"104.16.9.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":13},{"remote_address":"104.16.9.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6667,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":13},{"remote_address":"104.16.9.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6667,"process":"pnpr","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":13},{"remote_address":"104.21.7.32","remote_names":["npm.jsr.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4816,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4789,"process":"sudo","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":5487,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"],"github_step":"3. Install pnpm and Node (pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2)","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":5635,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"],"github_step":"3. Install pnpm and Node (pnpm/setup@84cb39b217b10273981911c288cd62326dc7c6d2)","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":5967,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4858,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6008,"process":"git-remote-http","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"],"github_step":null,"flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6365,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":9708,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6667,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":14676,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":19302,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":24079,"process":"php8.3","ancestry":["systemd","sessionclean","sessionclean","php8.3"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":24432,"process":"pacquet","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":30184,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":29710,"process":"pnpr","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1769,"process":"snapd","ancestry":["systemd","snapd"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":3841,"process":"Runner.Worker","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":30466,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4858,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":6667,"process":"pnpr","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":9708,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":15},{"remote_address":"140.82.112.22","remote_names":["glb-db52c2cf8be544.github.com","results-receiver.actions.githubusercontent"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4066,"process":"nginx","ancestry":["systemd","nginx","nginx"],"github_step":"99. Runner Processes","flow_id":16},{"remote_address":"140.82.112.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":16547,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":17},{"remote_address":"140.82.112.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":18379,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":17},{"remote_address":"140.82.113.10","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30160,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":18},{"remote_address":"140.82.113.10","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":18},{"remote_address":"140.82.113.21","remote_names":["140.82.113.21"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4065,"process":"nginx","ancestry":["systemd","nginx","nginx"],"github_step":"99. Runner Processes","flow_id":19},{"remote_address":"140.82.113.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":27666,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":20},{"remote_address":"140.82.113.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30184,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":20},{"remote_address":"140.82.113.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30466,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":20},{"remote_address":"140.82.113.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":20},{"remote_address":"140.82.113.9","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6157,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"],"github_step":"11. Validate test chunk inputs","flow_id":21},{"remote_address":"140.82.113.9","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":21},{"remote_address":"140.82.113.9","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":27666,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":21},{"remote_address":"140.82.114.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":19289,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":22},{"remote_address":"140.82.114.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6008,"process":"git-remote-http","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"],"github_step":null,"flow_id":23},{"remote_address":"140.82.114.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":6644,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":23},{"remote_address":"140.82.114.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14655,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":23},{"remote_address":"140.82.114.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14676,"process":"git-remote-http","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"],"github_step":"11. Validate test chunk inputs","flow_id":23},{"remote_address":"140.82.114.9","remote_names":["codeload.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":14631,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":24},{"remote_address":"169.254.169.123","remote_names":["169.254.169.123"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":25},{"remote_address":"172.233.157.223","remote_names":["172.233.157.223"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":26},{"remote_address":"172.67.135.174","remote_names":["npm.jsr.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":27},{"remote_address":"18.238.96.73","remote_names":["cloudfront.cdn.snapcraftcontent.com","d151fo0aytpgqo.cloudfront.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1769,"process":"snapd","ancestry":["systemd","snapd"],"github_step":"99. Runner Processes","flow_id":28},{"remote_address":"185.125.188.57","remote_names":["api.snapcraft.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1769,"process":"snapd","ancestry":["systemd","snapd"],"github_step":"99. Runner Processes","flow_id":29},{"remote_address":"185.125.188.58","remote_names":["api.snapcraft.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1769,"process":"snapd","ancestry":["systemd","snapd"],"github_step":"99. Runner Processes","flow_id":30},{"remote_address":"185.125.190.56","remote_names":["185.125.190.56"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":31},{"remote_address":"185.125.190.57","remote_names":["185.125.190.57"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":32},{"remote_address":"185.125.190.58","remote_names":["185.125.190.58"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":33},{"remote_address":"192.168.127.1","remote_names":["192.168.127.1"],"remote_ports":["1045","1049"],"protocol":"TCP","lineage_recorded":true,"pid":3902,"process":"blacksmithd","ancestry":["systemd","bash","blacksmithd"],"github_step":"99. Runner Processes","flow_id":34},{"remote_address":"192.168.127.1","remote_names":["192.168.127.1"],"remote_ports":["1045","1049"],"protocol":"TCP","lineage_recorded":true,"pid":2241,"process":"blacksmithd","ancestry":["systemd","sudo","blacksmithd"],"github_step":"99. Runner Processes","flow_id":34},{"remote_address":"208.113.130.146","remote_names":["208.113.130.146"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":35},{"remote_address":"23.150.40.242","remote_names":["23.150.40.242"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":36},{"remote_address":"23.186.168.133","remote_names":["23.186.168.133"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":37},{"remote_address":"45.55.98.129","remote_names":["unofficial-builds.nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4816,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":38},{"remote_address":"45.55.98.129","remote_names":["unofficial-builds.nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":19674,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":38},{"remote_address":"45.55.98.129","remote_names":["unofficial-builds.nodejs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":30338,"process":"node","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"],"github_step":"11. Validate test chunk inputs","flow_id":38},{"remote_address":"57.150.4.193","remote_names":["blob.bnz49prdstrz09a.store.core.windows","blob.bnz49prdstrz09a.trafficmanager.net","productionresultssa8.blob.core.windows.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":5967,"process":"node","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"],"github_step":"99. Runner Processes","flow_id":39},{"remote_address":"8.8.8.8","remote_names":["8.8.8.8"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4065,"process":"nginx","ancestry":["systemd","nginx","nginx"],"github_step":"99. Runner Processes","flow_id":40},{"remote_address":"8.8.8.8","remote_names":["8.8.8.8"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1715,"process":"systemd-resolve","ancestry":["systemd","systemd-resolve"],"github_step":"99. Runner Processes","flow_id":40},{"remote_address":"91.189.91.157","remote_names":["91.189.91.157"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1874,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":41}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"}],"annotations":[{"kind":"assertion","id":"no_bad_egress_domain","category":"egress","ancestry":[]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","git","git","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","node","node","pnpr"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","bash","node","pn","dash","pn","dash","pn","dash","pnpm","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","bash","bash","node","dash","pnpm","dash","node","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","dash","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","snapd"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","snapd"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","snapd"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","snapd"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","snapd"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","git","git","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","node","node","git-remote-http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","node","pacquet"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]},{"kind":"detection","id":"hidden_elf_exec","category":"execution","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]},{"kind":"detection","id":"interpreter_shell_spawn","category":"generic","ancestry":["systemd","start_runner.sh","start_actions_r","run.sh","run-helper.sh","Runner.Listener","Runner.Worker","bash","node","node","dash","dash","dash","dash","dash","node","node","pnpr"]}]}}