Network Egress — analysis-kinds

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node (pid 2601 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.113.3] :443 (https) TCP
release-assets.githubusercontent.com [185.199.111.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker (pid 2147 · Runner.Worker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › sudo › provjobd1133417 (pid 2113 · provjobd1133417)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
hosted-compute-watchdog-prod-iad-01.githubapp [140.82.114.24] :443 (https) TCP · also recorded: glb-2a3c35-public-internal.githubapp.com

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2670 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
results-receiver.actions.githubusercontent [140.82.113.22] :443 (https) TCP · also recorded: glb-db52c2cf8be544.github.com
github.com [140.82.113.3] :443 (https) TCP
api.github.com [140.82.114.6] :443 (https) TCP
release-assets.githubusercontent.com [185.199.109.133] :443 (https) TCP

systemd › hosted-compute- (pid 2098 · hosted-compute-)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
hosted-compute-watchdog-prod-iad-01.githubapp [140.82.113.24] :443 (https) TCP · also recorded: glb-2a3c35-public-internal.githubapp.com
140.82.114.23 :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 3252 · node)

glb-db52c2cf8be544.github.com [140.82.112.21] :443 (https) TCP · also recorded: results-receiver.actions.githubusercontent
blob.blz25prdstrz09a.store.core.windows [20.209.226.129] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa11.blob.core.windows

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node (pid 2670 · node)

api.github.com [140.82.114.6] :443 (https) TCP
release-assets.githubusercontent.com [185.199.109.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 3265 · node)

blob.blz25prdstrz09a.store.core.windows [20.209.226.1] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa11.blob.core.windows

systemd › systemd-network (pid 737 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-labs/codeql-action

Kernel-recorded by the Garnet eBPF sensorpinned to commit 612a6f7

PR Check - Analysis kinds/analysis-kinds

run 299355055382026-07-22 15:55:16 UTC

Network Egress

13 destinations · 13 flows · 9 processes

systemd
- hosted-compute-agentRunner.Listener
  - Runner.Worker
    - node[2601 · node]runner infrastructure
      - github.com140.82.113.3:443 (https) · tcp
      - release-assets.githubusercontent.com185.199.111.133:443 (https) · tcp
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
    - node[2670 · node]runner infrastructure
      - api.github.com140.82.114.6:443 (https) · tcp
      - release-assets.githubusercontent.com185.199.109.133:443 (https) · tcp
- hosted-compute-[2098 · hosted-compute-]runner infrastructure
  - Runner.Listener
    - Runner.Worker[2147 · Runner.Worker]runner infrastructure
      - node[2670 · node]runner infrastructure
        results-receiver.actions.githubusercontent140.82.113.22:443 (https) · tcpalso recorded: glb-db52c2cf8be544.github.com
        github.com140.82.113.3:443 (https) · tcp
        api.github.com140.82.114.6:443 (https) · tcp
        release-assets.githubusercontent.com185.199.109.133:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[3252 · node]runner infrastructure
        glb-db52c2cf8be544.github.com140.82.112.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
        blob.blz25prdstrz09a.store.core.windows20.209.226.129:443 (https) · tcpalso recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa11.blob.core.windows
      - node[3265 · node]runner infrastructure
        blob.blz25prdstrz09a.store.core.windows20.209.226.1:443 (https) · tcpalso recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa11.blob.core.windows
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd1133417[2113 · provjobd1133417]runner infrastructure
      - hosted-compute-watchdog-prod-iad-01.githubapp140.82.114.24:443 (https) · tcpalso recorded: glb-2a3c35-public-internal.githubapp.com
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - hosted-compute-watchdog-prod-iad-01.githubapp140.82.113.24:443 (https) · tcpalso recorded: glb-2a3c35-public-internal.githubapp.com
  - 140.82.114.23:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-network[737 · systemd-network]runner infrastructure
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Workload

Repositorygarnet-labs/codeql-action

WorkflowPR Check - Analysis kinds

Jobanalysis-kinds

Run ID29935505538

Profile UUID019f8a89-db2b-76ad-94f7-b8164a95c816

Commit SHA612a6f7005beaa5addc961b3d73a55cbd34746ac

Timestamp2026-07-22 15:55:16 UTC

💡 How to read this

Runner.Worker
- bash
  - curl
    - example.com
    - localhost(dns resolver)