{"profiles":[{"schema_version":"runtime-review-public/v3","timestamp":"2026-11-10T18:44:06.448491469Z","run":{"profile_id":"01a1c6c6-4c56-7478-afa8-2511b817107e","run_id":"42878017207","repository":"garnet-labs/pnpm","workflow":"Garnet jibril v2.18.0-rc.2 flush test","job":"test","commit_sha":"2eb9ce86beaf5461fc085e90c06fad7317045d0f","ref":"refs/pull/130/merge"},"associations":[{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4189,"process":"curl","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","curl"],"github_step":"0. Generate workload","flow_id":0},{"remote_address":"140.82.112.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4183,"process":"git-remote-http","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","git","git","git","git-remote-http"],"github_step":"0. Generate workload","flow_id":1},{"remote_address":"169.254.169.123","remote_names":["169.254.169.123"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1867,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"<unknown>","flow_id":2},{"remote_address":"192.168.127.1","remote_names":["192.168.127.1"],"remote_ports":["1034"],"protocol":"TCP","lineage_recorded":true,"pid":4172,"process":"git","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","git"],"github_step":"0. Generate workload","flow_id":3},{"remote_address":"192.168.127.1","remote_names":["192.168.127.1"],"remote_ports":["1034"],"protocol":"TCP","lineage_recorded":true,"pid":2220,"process":"blacksmithd","ancestry":["systemd","sudo","blacksmithd"],"github_step":"<unknown>","flow_id":3},{"remote_address":"8.8.8.8","remote_names":["8.8.8.8"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1727,"process":"systemd-resolved","ancestry":["systemd","systemd-resolved"],"github_step":"<unknown>","flow_id":4}],"annotations":[{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","git"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","sudo","blacksmithd"]}]}],"count":1,"profile":{"schema_version":"runtime-review-public/v3","timestamp":"2026-11-10T18:44:06.448491469Z","run":{"profile_id":"01a1c6c6-4c56-7478-afa8-2511b817107e","run_id":"42878017207","repository":"garnet-labs/pnpm","workflow":"Garnet jibril v2.18.0-rc.2 flush test","job":"test","commit_sha":"2eb9ce86beaf5461fc085e90c06fad7317045d0f","ref":"refs/pull/130/merge"},"associations":[{"remote_address":"104.16.1.34","remote_names":["registry.npmjs.org"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4189,"process":"curl","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","curl"],"github_step":"0. Generate workload","flow_id":0},{"remote_address":"140.82.112.3","remote_names":["github.com"],"remote_ports":["443 (https)"],"protocol":"TCP","lineage_recorded":true,"pid":4183,"process":"git-remote-http","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","git","git","git","git-remote-http"],"github_step":"0. Generate workload","flow_id":1},{"remote_address":"169.254.169.123","remote_names":["169.254.169.123"],"remote_ports":["123 (ntp)"],"protocol":"UDP","lineage_recorded":true,"pid":1867,"process":"chronyd","ancestry":["systemd","chronyd"],"github_step":"<unknown>","flow_id":2},{"remote_address":"192.168.127.1","remote_names":["192.168.127.1"],"remote_ports":["1034"],"protocol":"TCP","lineage_recorded":true,"pid":4172,"process":"git","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","git"],"github_step":"0. Generate workload","flow_id":3},{"remote_address":"192.168.127.1","remote_names":["192.168.127.1"],"remote_ports":["1034"],"protocol":"TCP","lineage_recorded":true,"pid":2220,"process":"blacksmithd","ancestry":["systemd","sudo","blacksmithd"],"github_step":"<unknown>","flow_id":3},{"remote_address":"8.8.8.8","remote_names":["8.8.8.8"],"remote_ports":["53 (dns)"],"protocol":"UDP","lineage_recorded":true,"pid":1727,"process":"systemd-resolved","ancestry":["systemd","systemd-resolved"],"github_step":"<unknown>","flow_id":4}],"annotations":[{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","bash","bash","bash","bash","Runner.Listener","Runner.Worker","bash","git"]},{"kind":"detection","id":"exec_from_unusual_dir","category":"execution","ancestry":["systemd","sudo","blacksmithd"]}]}}