{"profiles":[{"schema_version":"runtime-review-public/v3","timestamp":"2026-11-05T16:52:15.85548831Z","run":{"profile_id":"01a1aca1-26f6-7fe1-8902-d5f6a3cb5572","run_id":"42068620121","repository":"garnet-labs/posthog","workflow":"Garnet Runtime Visibility","job":"gateway-install","commit_sha":"5812b1c0193f39c5d61e3af96b7b4cc47b71b8e6","ref":"refs/pull/249/merge"},"associations":[{"remote_address":"127.0.0.100","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"127.0.0.100","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2935,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"127.0.0.100","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2969,"process":"python3.14","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node","bash","python3.14"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"140.82.116.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2935,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":1},{"remote_address":"140.82.116.5","remote_names":["api.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2935,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":2},{"remote_address":"151.101.0.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":3},{"remote_address":"151.101.128.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":4},{"remote_address":"151.101.128.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2969,"process":"python3.14","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node","bash","python3.14"],"github_step":"99. Runner Processes","flow_id":4},{"remote_address":"151.101.192.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":5},{"remote_address":"151.101.64.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":6},{"remote_address":"185.199.108.133","remote_names":["raw.githubusercontent.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2935,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":7}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"}],"annotations":[{"kind":"assertion","id":"no_bad_egress_domain","category":"egress","ancestry":[]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","uv"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","bash","python3.14"]}]}],"count":1,"profile":{"schema_version":"runtime-review-public/v3","timestamp":"2026-11-05T16:52:15.85548831Z","run":{"profile_id":"01a1aca1-26f6-7fe1-8902-d5f6a3cb5572","run_id":"42068620121","repository":"garnet-labs/posthog","workflow":"Garnet Runtime Visibility","job":"gateway-install","commit_sha":"5812b1c0193f39c5d61e3af96b7b4cc47b71b8e6","ref":"refs/pull/249/merge"},"associations":[{"remote_address":"127.0.0.100","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"127.0.0.100","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2935,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"127.0.0.100","remote_names":["localhost"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":2969,"process":"python3.14","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node","bash","python3.14"],"github_step":"99. Runner Processes","flow_id":0},{"remote_address":"140.82.116.4","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2935,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":1},{"remote_address":"140.82.116.5","remote_names":["api.github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2935,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":2},{"remote_address":"151.101.0.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":3},{"remote_address":"151.101.128.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":4},{"remote_address":"151.101.128.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2969,"process":"python3.14","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node","bash","python3.14"],"github_step":"99. Runner Processes","flow_id":4},{"remote_address":"151.101.192.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":5},{"remote_address":"151.101.64.223","remote_names":["pypi.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":3018,"process":"uv","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","bash","uv"],"github_step":"99. Runner Processes","flow_id":6},{"remote_address":"185.199.108.133","remote_names":["raw.githubusercontent.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":2935,"process":"node","ancestry":["systemd","hosted-compute-","Runner.Listener","Runner.Worker","node"],"github_step":"99. Runner Processes","flow_id":7}],"assertions":[{"id":"no_bad_egress_domain","result":"ATTENTION"}],"annotations":[{"kind":"assertion","id":"no_bad_egress_domain","category":"egress","ancestry":[]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","uv"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","node","bash","python3.14"]}]}}