See what ran · garnet-labs/posthog · Garnet Runtime Visibility

See what ran — every outbound connection and its process lineage.

Workload

Repository: garnet-labs/posthog
Workflow: Garnet Runtime Visibility
Run ID: 30303998828
Job: dep-install
Commit SHA: 743843715b29048b2cd518e6444cab00be4d1d1b
Timestamp: 2026-07-27T20:50:36Z
Profile UUID: 019fa558-06a3-7e86-84de-7d562faa8df1

Network Egress — dep-install

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › MainThread (MainThread)

registry.npmjs.org [104.16.0.34] :443 (https) TCP
registry.npmjs.org [104.16.1.34] :443 (https) TCP
registry.npmjs.org [104.16.10.34] :443 (https) TCP
registry.npmjs.org [104.16.11.34] :443 (https) TCP
registry.npmjs.org [104.16.2.34] :443 (https) TCP
registry.npmjs.org [104.16.3.34] :443 (https) TCP
registry.npmjs.org [104.16.4.34] :443 (https) TCP
registry.npmjs.org [104.16.5.34] :443 (https) TCP
registry.npmjs.org [104.16.6.34] :443 (https) TCP
registry.npmjs.org [104.16.7.34] :443 (https) TCP
registry.npmjs.org [104.16.8.34] :443 (https) TCP
registry.npmjs.org [104.16.9.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
codeload.github.com [140.82.113.9] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node (node)

registry.npmjs.org [104.16.0.34] :443 (https) TCP
registry.npmjs.org [104.16.1.34] :443 (https) TCP
registry.npmjs.org [104.16.10.34] :443 (https) TCP
registry.npmjs.org [104.16.11.34] :443 (https) TCP
registry.npmjs.org [104.16.2.34] :443 (https) TCP
registry.npmjs.org [104.16.4.34] :443 (https) TCP
registry.npmjs.org [104.16.7.34] :443 (https) TCP
registry.npmjs.org [104.16.8.34] :443 (https) TCP
registry.npmjs.org [104.16.9.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node › node (node)

registry.npmjs.org [104.16.11.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › MainThread › dash › dash › dash (dash)

nodejs.org [104.16.212.131] :443 (https) TCP
nodejs.org [104.16.213.131] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node (node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.112.3] :443 (https) TCP
api.github.com [140.82.112.5] :443 (https) TCP
release-assets.githubusercontent.com [185.199.109.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker (Runner.Worker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › MainThread › dash › dash (dash)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.114.4] :443 (https) TCP
release-assets.githubusercontent.com [185.199.110.133] :443 (https) TCP
release-assets.githubusercontent.com [185.199.111.133] :443 (https) TCP

systemd › hosted-compute- (hosted-compute-)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › systemd-network (systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

Recorded Totals

23 destinations · 23 flows.

Garnet Runtime Review

garnet-labs/posthog

Kernel-recorded by the Garnet eBPF sensorpinned to commit 7438437

Garnet Runtime Visibility/dep-install

run 303039988282026-07-27 20:50:36 UTC

Network Egress

23 destinations · 23 flows · 9 processes

systemd
- hosted-compute-
  - Runner.Listener
    - Runner.Worker
      - bash
        MainThread
        dash
        dash
        dash
        nodejs.org104.16.212.131:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        github.com140.82.114.4:443 (https) · tcp
        release-assets.githubusercontent.com185.199.110.133:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        registry.npmjs.org104.16.0.34:443 (https) · tcp
        codeload.github.com140.82.113.9:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- hosted-compute-agentRunner.Listener
  - Runner.Worker
    - bash
      - node
        registry.npmjs.org104.16.0.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
    - node
      - node
        registry.npmjs.org104.16.11.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - github.com140.82.112.3:443 (https) · tcp
      - api.github.com140.82.112.5:443 (https) · tcp
      - release-assets.githubusercontent.com185.199.109.133:443 (https) · tcp
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-network
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Workload

Repositorygarnet-labs/posthog

WorkflowGarnet Runtime Visibility

Jobdep-install

Run ID30303998828

Profile UUID019fa558-06a3-7e86-84de-7d562faa8df1

Commit SHA743843715b29048b2cd518e6444cab00be4d1d1b

Timestamp2026-07-27 20:50:36 UTC

💡 Reading this review

Runner.Worker
- bash
  - curl
    - example.com
    - localhost(dns resolver)

Italic is runner scaffolding · bold is GitHub-step-attributed lineage · notes are factual context.

Profile your runs with Garnet

Kernel-level visibility for every CI job — one step in your GitHub Actions workflow.