{"profiles":[{"schema_version":"runtime-review-public/v3","timestamp":"2026-11-04T21:43:27.000217002Z","run":{"profile_id":"01a1a887-bd78-7226-9d14-a03ba0e43454","run_id":"41916597140","repository":"garnet-labs/sentry-javascript","workflow":"CI: Build & Test","job":"job_e2e_tests","commit_sha":"1b54dac071fababc70d3869d7db167061259cec0","ref":"refs/pull/64/merge"},"associations":[{"remote_address":"10.0.0.2","remote_names":["10.0.0.2"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":716,"process":"systemd-resolve","ancestry":["systemd","systemd-resolve"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"100.58.144.241","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":1},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":2},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":2},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":3},{"remote_address":"104.16.10.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":4},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":5},{"remote_address":"104.16.2.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":6},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":7},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":7271,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"],"github_step":"99. Runner Processes","flow_id":8},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":9},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":9},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2474,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"],"github_step":"99. Runner Processes","flow_id":10},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":10},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2785,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"github_step":"99. Runner Processes","flow_id":10},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":11},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":12},{"remote_address":"104.16.9.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":13},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2407,"process":"sudo","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2420,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2474,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2840,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2560,"process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2849,"process":"http","ancestry":["systemd","python3.12","http"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2781,"process":"sudo","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","sudo"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2785,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2827,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"3. Install E2E app dependencies","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":3895,"process":"php8.3","ancestry":["systemd","sessionclean","sessionclean","php8.3"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":3345,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1925,"process":"provjobd2540471","ancestry":["systemd","hosted-compute-","sudo","provjobd2540471"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1969,"process":"Runner.Worker","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1866,"process":"hosted-compute-","ancestry":["systemd","hosted-compute-"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":7271,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"13.107.246.70","remote_names":["packages.microsoft.com","part-0042.t-0009.t-msedge.net","shed.dual-low.part-0042.t-0009.t-msedge","azurefd-critical-t-prod-stage2.trafficmanager","pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2842,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"140.82.112.22","remote_names":["glb-db52c2cf8be544.github.com","results-receiver.actions.githubusercontent"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2548,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":16},{"remote_address":"140.82.112.22","remote_names":["glb-db52c2cf8be544.github.com","results-receiver.actions.githubusercontent"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2560,"process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"github_step":"99. Runner Processes","flow_id":16},{"remote_address":"140.82.116.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2420,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":17},{"remote_address":"142.250.107.207","remote_names":["storage.googleapis.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3757,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":18},{"remote_address":"142.251.46.91","remote_names":["storage.googleapis.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3846,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":19},{"remote_address":"143.204.1.3","remote_names":["d3ipk8a4rcghwr.cloudfront.net","production.cloudfront.docker.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":20},{"remote_address":"143.204.1.64","remote_names":["d3ipk8a4rcghwr.cloudfront.net","production.cloudfront.docker.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":21},{"remote_address":"143.204.1.73","remote_names":["d3ipk8a4rcghwr.cloudfront.net","production.cloudfront.docker.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":22},{"remote_address":"143.204.1.90","remote_names":["d3ipk8a4rcghwr.cloudfront.net","production.cloudfront.docker.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":23},{"remote_address":"150.171.110.145","remote_names":["cdn.playwright.dev","mr-z01.tm-azurefd.net","playwright-bkakghazbfe7grc5.z01.azurefd"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3757,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":24},{"remote_address":"150.171.110.151","remote_names":["cdn.playwright.dev","mr-z01.tm-azurefd.net","playwright-bkakghazbfe7grc5.z01.azurefd"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3834,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":25},{"remote_address":"151.101.22.172","remote_names":["playwright.download.prss.microsoft.com","fg.microsoft.map.fastly.net","sundry-star-net-geo.trafficmanager.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3834,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":26},{"remote_address":"169.254.169.123","remote_names":["169.254.169.123"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":27},{"remote_address":"172.18.0.2","remote_names":["172.18.0.2"],"remote_ports":["5432 (postgresql)","6379 (redis)"],"protocol":"TCP","lineage_recorded":true,"pid":4468,"process":"docker-proxy","ancestry":["systemd","dockerd","docker-proxy"],"github_step":"99. Runner Processes","flow_id":28},{"remote_address":"172.18.0.3","remote_names":["172.18.0.3"],"remote_ports":["5432 (postgresql)","6379 (redis)"],"protocol":"TCP","lineage_recorded":true,"pid":4469,"process":"docker-proxy","ancestry":["systemd","dockerd","docker-proxy"],"github_step":"99. Runner Processes","flow_id":29},{"remote_address":"172.64.144.78","remote_names":["auth.docker.io","auth.docker.io.cdn.cloudflare.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":30},{"remote_address":"184.194.1.54","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":31},{"remote_address":"185.125.190.23","remote_names":["esm.ubuntu.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2889,"process":"http","ancestry":["systemd","python3.12","http"],"github_step":"99. Runner Processes","flow_id":32},{"remote_address":"185.125.190.56","remote_names":["185.125.190.56"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":33},{"remote_address":"185.125.190.57","remote_names":["185.125.190.57"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":34},{"remote_address":"185.125.190.58","remote_names":["185.125.190.58"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":35},{"remote_address":"185.199.110.133","remote_names":["release-assets.githubusercontent.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2420,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":36},{"remote_address":"20.209.113.193","remote_names":["productionresultssa15.blob.core.windows","blob.bn3prdstrz12a.trafficmanager.net","blob.bn3prdstrz12a.store.core.windows.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2560,"process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"github_step":"99. Runner Processes","flow_id":37},{"remote_address":"20.209.178.193","remote_names":["productionresultssa15.blob.core.windows","blob.bn3prdstrz12a.trafficmanager.net","blob.bn3prdstrz12a.store.core.windows.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2548,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":38},{"remote_address":"20.29.134.17","remote_names":["api.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2420,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":39},{"remote_address":"20.75.202.224","remote_names":["20.75.202.224"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1925,"process":"provjobd2540471","ancestry":["systemd","hosted-compute-","sudo","provjobd2540471"],"github_step":"99. Runner Processes","flow_id":40},{"remote_address":"20.75.202.224","remote_names":["20.75.202.224"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1866,"process":"hosted-compute-","ancestry":["systemd","hosted-compute-"],"github_step":"99. Runner Processes","flow_id":40},{"remote_address":"23.172.120.58","remote_names":["23.172.120.58"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":41},{"remote_address":"23.186.168.123","remote_names":["23.186.168.123"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":42},{"remote_address":"3.129.149.36","remote_names":["us-east-2.ec2.archive.ubuntu.com"],"remote_ports":["80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":2845,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":43},{"remote_address":"3.218.197.120","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":44},{"remote_address":"3.219.114.177","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":45},{"remote_address":"3.94.216.140","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":46},{"remote_address":"34.160.81.0","remote_names":["o1.ingest.sentry.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3345,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"],"github_step":"99. Runner Processes","flow_id":47},{"remote_address":"34.253.181.30","remote_names":["motd.ubuntu.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2849,"process":"http","ancestry":["systemd","python3.12","http"],"github_step":"99. Runner Processes","flow_id":48},{"remote_address":"40.160.28.79","remote_names":["40.160.28.79"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":49},{"remote_address":"52.15.159.198","remote_names":["us-east-2.ec2.archive.ubuntu.com"],"remote_ports":["80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":3180,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":50},{"remote_address":"52.72.167.255","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":51},{"remote_address":"54.236.144.168","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":52},{"remote_address":"91.189.91.157","remote_names":["91.189.91.157"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":53},{"remote_address":"91.189.91.83","remote_names":["security.ubuntu.com"],"remote_ports":["80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":2840,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":54},{"remote_address":"96.245.170.99","remote_names":["96.245.170.99"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":55},{"remote_address":"ff02::2","remote_names":["ip6-allrouters"],"remote_ports":["0 (reserved)"],"protocol":"ICMPV6","lineage_recorded":true,"pid":831,"process":"systemd-network","ancestry":["systemd","systemd-network"],"github_step":"99. Runner Processes","flow_id":56}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"}],"annotations":[{"kind":"assertion","id":"no_bad_egress_domain","category":"egress","ancestry":[]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]}]}],"count":1,"profile":{"schema_version":"runtime-review-public/v3","timestamp":"2026-11-04T21:43:27.000217002Z","run":{"profile_id":"01a1a887-bd78-7226-9d14-a03ba0e43454","run_id":"41916597140","repository":"garnet-labs/sentry-javascript","workflow":"CI: Build & Test","job":"job_e2e_tests","commit_sha":"1b54dac071fababc70d3869d7db167061259cec0","ref":"refs/pull/64/merge"},"associations":[{"remote_address":"10.0.0.2","remote_names":["10.0.0.2"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":716,"process":"systemd-resolve","ancestry":["systemd","systemd-resolve"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"100.58.144.241","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":1},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":2},{"remote_address":"104.16.0.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":2},{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":3},{"remote_address":"104.16.10.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":4},{"remote_address":"104.16.11.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":5},{"remote_address":"104.16.2.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":6},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":7},{"remote_address":"104.16.3.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":7},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":8},{"remote_address":"104.16.4.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":7271,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"],"github_step":"99. Runner Processes","flow_id":8},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":9},{"remote_address":"104.16.5.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":9},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2474,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"],"github_step":"99. Runner Processes","flow_id":10},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":10},{"remote_address":"104.16.6.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2785,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"github_step":"99. Runner Processes","flow_id":10},{"remote_address":"104.16.7.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":11},{"remote_address":"104.16.8.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":12},{"remote_address":"104.16.9.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":13},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2407,"process":"sudo","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2420,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2502,"process":"pnpm","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2474,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2840,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2560,"process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2849,"process":"http","ancestry":["systemd","python3.12","http"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2781,"process":"sudo","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","sudo"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2702,"process":"pnpm","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","timeout","pnpm"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2785,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2827,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"3. Install E2E app dependencies","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":3895,"process":"php8.3","ancestry":["systemd","sessionclean","sessionclean","php8.3"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":3345,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1925,"process":"provjobd2540471","ancestry":["systemd","hosted-compute-","sudo","provjobd2540471"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1969,"process":"Runner.Worker","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1866,"process":"hosted-compute-","ancestry":["systemd","hosted-compute-"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"127.0.0.53","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":7271,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"],"github_step":"99. Runner Processes","flow_id":14},{"remote_address":"13.107.246.70","remote_names":["packages.microsoft.com","part-0042.t-0009.t-msedge.net","shed.dual-low.part-0042.t-0009.t-msedge","azurefd-critical-t-prod-stage2.trafficmanager","pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2842,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":15},{"remote_address":"140.82.112.22","remote_names":["glb-db52c2cf8be544.github.com","results-receiver.actions.githubusercontent"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2548,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":16},{"remote_address":"140.82.112.22","remote_names":["glb-db52c2cf8be544.github.com","results-receiver.actions.githubusercontent"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2560,"process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"github_step":"99. Runner Processes","flow_id":16},{"remote_address":"140.82.116.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2420,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":17},{"remote_address":"142.250.107.207","remote_names":["storage.googleapis.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3757,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":18},{"remote_address":"142.251.46.91","remote_names":["storage.googleapis.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3846,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":19},{"remote_address":"143.204.1.3","remote_names":["d3ipk8a4rcghwr.cloudfront.net","production.cloudfront.docker.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":20},{"remote_address":"143.204.1.64","remote_names":["d3ipk8a4rcghwr.cloudfront.net","production.cloudfront.docker.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":21},{"remote_address":"143.204.1.73","remote_names":["d3ipk8a4rcghwr.cloudfront.net","production.cloudfront.docker.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":22},{"remote_address":"143.204.1.90","remote_names":["d3ipk8a4rcghwr.cloudfront.net","production.cloudfront.docker.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":23},{"remote_address":"150.171.110.145","remote_names":["cdn.playwright.dev","mr-z01.tm-azurefd.net","playwright-bkakghazbfe7grc5.z01.azurefd"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3757,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":24},{"remote_address":"150.171.110.151","remote_names":["cdn.playwright.dev","mr-z01.tm-azurefd.net","playwright-bkakghazbfe7grc5.z01.azurefd"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3834,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":25},{"remote_address":"151.101.22.172","remote_names":["playwright.download.prss.microsoft.com","fg.microsoft.map.fastly.net","sundry-star-net-geo.trafficmanager.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3834,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","node"],"github_step":"99. Runner Processes","flow_id":26},{"remote_address":"169.254.169.123","remote_names":["169.254.169.123"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":27},{"remote_address":"172.18.0.2","remote_names":["172.18.0.2"],"remote_ports":["5432 (postgresql)","6379 (redis)"],"protocol":"TCP","lineage_recorded":true,"pid":4468,"process":"docker-proxy","ancestry":["systemd","dockerd","docker-proxy"],"github_step":"99. Runner Processes","flow_id":28},{"remote_address":"172.18.0.3","remote_names":["172.18.0.3"],"remote_ports":["5432 (postgresql)","6379 (redis)"],"protocol":"TCP","lineage_recorded":true,"pid":4469,"process":"docker-proxy","ancestry":["systemd","dockerd","docker-proxy"],"github_step":"99. Runner Processes","flow_id":29},{"remote_address":"172.64.144.78","remote_names":["auth.docker.io","auth.docker.io.cdn.cloudflare.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":30},{"remote_address":"184.194.1.54","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":31},{"remote_address":"185.125.190.23","remote_names":["esm.ubuntu.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2889,"process":"http","ancestry":["systemd","python3.12","http"],"github_step":"99. Runner Processes","flow_id":32},{"remote_address":"185.125.190.56","remote_names":["185.125.190.56"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":33},{"remote_address":"185.125.190.57","remote_names":["185.125.190.57"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":34},{"remote_address":"185.125.190.58","remote_names":["185.125.190.58"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":35},{"remote_address":"185.199.110.133","remote_names":["release-assets.githubusercontent.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2420,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":36},{"remote_address":"20.209.113.193","remote_names":["productionresultssa15.blob.core.windows","blob.bn3prdstrz12a.trafficmanager.net","blob.bn3prdstrz12a.store.core.windows.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2560,"process":"MainThread","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","MainThread"],"github_step":"99. Runner Processes","flow_id":37},{"remote_address":"20.209.178.193","remote_names":["productionresultssa15.blob.core.windows","blob.bn3prdstrz12a.trafficmanager.net","blob.bn3prdstrz12a.store.core.windows.net"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2548,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":38},{"remote_address":"20.29.134.17","remote_names":["api.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2420,"process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":39},{"remote_address":"20.75.202.224","remote_names":["20.75.202.224"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1925,"process":"provjobd2540471","ancestry":["systemd","hosted-compute-","sudo","provjobd2540471"],"github_step":"99. Runner Processes","flow_id":40},{"remote_address":"20.75.202.224","remote_names":["20.75.202.224"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1866,"process":"hosted-compute-","ancestry":["systemd","hosted-compute-"],"github_step":"99. Runner Processes","flow_id":40},{"remote_address":"23.172.120.58","remote_names":["23.172.120.58"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":41},{"remote_address":"23.186.168.123","remote_names":["23.186.168.123"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":42},{"remote_address":"3.129.149.36","remote_names":["us-east-2.ec2.archive.ubuntu.com"],"remote_ports":["80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":2845,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":43},{"remote_address":"3.218.197.120","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":44},{"remote_address":"3.219.114.177","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":45},{"remote_address":"3.94.216.140","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":46},{"remote_address":"34.160.81.0","remote_names":["o1.ingest.sentry.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3345,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"],"github_step":"99. Runner Processes","flow_id":47},{"remote_address":"34.253.181.30","remote_names":["motd.ubuntu.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2849,"process":"http","ancestry":["systemd","python3.12","http"],"github_step":"99. Runner Processes","flow_id":48},{"remote_address":"40.160.28.79","remote_names":["40.160.28.79"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":49},{"remote_address":"52.15.159.198","remote_names":["us-east-2.ec2.archive.ubuntu.com"],"remote_ports":["80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":3180,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":50},{"remote_address":"52.72.167.255","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":51},{"remote_address":"54.236.144.168","remote_names":["registry-1.docker.io"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":1358,"process":"dockerd","ancestry":["systemd","dockerd"],"github_step":"99. Runner Processes","flow_id":52},{"remote_address":"91.189.91.157","remote_names":["91.189.91.157"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":53},{"remote_address":"91.189.91.83","remote_names":["security.ubuntu.com"],"remote_ports":["80 (http)"],"protocol":"TCP","lineage_recorded":true,"pid":2840,"process":"http","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"],"github_step":"99. Runner Processes","flow_id":54},{"remote_address":"96.245.170.99","remote_names":["96.245.170.99"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1047,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"99. Runner Processes","flow_id":55},{"remote_address":"ff02::2","remote_names":["ip6-allrouters"],"remote_ports":["0 (reserved)"],"protocol":"ICMPV6","lineage_recorded":true,"pid":831,"process":"systemd-network","ancestry":["systemd","systemd-network"],"github_step":"99. Runner Processes","flow_id":56}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"}],"annotations":[{"kind":"assertion","id":"no_bad_egress_domain","category":"egress","ancestry":[]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","dockerd"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","sudo"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","sudo","dash","apt-get","http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","pnpm","dash","pnpm","dash","node","dash","pnpm","node","node"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","sudo"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","timeout","pnpm"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","MainThread"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","hosted-compute-agent","sudo","provjobd2540471"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","python3.12","http"]},{"kind":"detection","id":"code_on_the_fly","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"credentials_files_access","category":"filesystem","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"global_shlib_modification","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"package_repo_config_modification","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"pam_config_modification","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]},{"kind":"detection","id":"shell_config_modification","category":"generic","ancestry":["systemd","sessionclean","sessionclean","php8.3"]}]}}