{"profiles":[{"schema_version":"runtime-review-public/v3","timestamp":"2026-09-05T02:01:14.720493401Z","run":{"profile_id":"01a06f4c-9193-7ad8-bc7a-4da15a37a027","run_id":"33937809760","repository":"garnet-labs/pnpm","workflow":"Garnet DNS egress","job":"install","commit_sha":"f263cf9f908f9e5ae50c60a2d7fd883ed269c770","ref":"refs/pull/40/merge"},"associations":[{"remote_address":"1.1.1.1","remote_names":["1.1.1.1"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4620,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"4. Path A - install a two-dependency fixture (cp -r .github/garnet/dns-egress \"$RUNNER_TEMP/fixture-install\")","flow_id":0},{"remote_address":"104.16.3.34","remote_names":["104.16.3.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4643,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"5. Path B - packageManager pin fetch by the installed binary","flow_id":1},{"remote_address":"104.16.4.34","remote_names":["104.16.4.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4643,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"5. Path B - packageManager pin fetch by the installed binary","flow_id":2},{"remote_address":"104.16.7.34","remote_names":["104.16.7.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4643,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"5. Path B - packageManager pin fetch by the installed binary","flow_id":3},{"remote_address":"104.16.8.34","remote_names":["104.16.8.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4620,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"4. Path A - install a two-dependency fixture (cp -r .github/garnet/dns-egress \"$RUNNER_TEMP/fixture-install\")","flow_id":4},{"remote_address":"104.16.9.34","remote_names":["104.16.9.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4620,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"4. Path A - install a two-dependency fixture (cp -r .github/garnet/dns-egress \"$RUNNER_TEMP/fixture-install\")","flow_id":5}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"}],"annotations":[{"kind":"assertion","id":"no_bad_egress_domain","category":"egress","ancestry":[]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"]}]}],"count":1,"profile":{"schema_version":"runtime-review-public/v3","timestamp":"2026-09-05T02:01:14.720493401Z","run":{"profile_id":"01a06f4c-9193-7ad8-bc7a-4da15a37a027","run_id":"33937809760","repository":"garnet-labs/pnpm","workflow":"Garnet DNS egress","job":"install","commit_sha":"f263cf9f908f9e5ae50c60a2d7fd883ed269c770","ref":"refs/pull/40/merge"},"associations":[{"remote_address":"1.1.1.1","remote_names":["1.1.1.1"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":4620,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"4. Path A - install a two-dependency fixture (cp -r .github/garnet/dns-egress \"$RUNNER_TEMP/fixture-install\")","flow_id":0},{"remote_address":"104.16.3.34","remote_names":["104.16.3.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4643,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"5. Path B - packageManager pin fetch by the installed binary","flow_id":1},{"remote_address":"104.16.4.34","remote_names":["104.16.4.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4643,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"5. Path B - packageManager pin fetch by the installed binary","flow_id":2},{"remote_address":"104.16.7.34","remote_names":["104.16.7.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4643,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"5. Path B - packageManager pin fetch by the installed binary","flow_id":3},{"remote_address":"104.16.8.34","remote_names":["104.16.8.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4620,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"4. Path A - install a two-dependency fixture (cp -r .github/garnet/dns-egress \"$RUNNER_TEMP/fixture-install\")","flow_id":4},{"remote_address":"104.16.9.34","remote_names":["104.16.9.34"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4620,"process":"pnpm","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"],"github_step":"4. Path A - install a two-dependency fixture (cp -r .github/garnet/dns-egress \"$RUNNER_TEMP/fixture-install\")","flow_id":5}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"}],"annotations":[{"kind":"assertion","id":"no_bad_egress_domain","category":"egress","ancestry":[]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","pnpm"]}]}}