Network Egress — security-fast

systemd › systemd › systemd › Runner.Worker › bash › node (pid 3230 · node)

registry.npmjs.org [104.16.1.34] :443 (https) TCP
registry.npmjs.org [104.16.5.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › timeout › git › git › git-remote-http (pid 2478 · git-remote-http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.116.4] :443 (https) TCP

systemd › systemd › systemd › Runner.Worker › bash › docker (pid 2525 · docker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › systemd › systemd › Runner.Worker › bash › pre-commit › git › git › git-remote-http (pid 2749 · git-remote-http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.116.4] :443 (https) TCP

systemd › systemd › systemd › Runner.Worker › bash › python3.12 (pid 2714 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › systemd › systemd › Runner.Worker › bash › pre-commit › python3.12 (pid 2947 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
files.pythonhosted.org [151.101.128.223] :443 (https) TCP · also recorded: dualstack.python.map.fastly.net
files.pythonhosted.org [151.101.192.223] :443 (https) TCP · also recorded: dualstack.python.map.fastly.net

systemd › python3.12 › python3.12 (pid 2946 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › systemd › systemd › Runner.Worker › bash › pre-commit › python3.12 › python3.12 (pid 2970 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › python3.12 (pid 2944 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
files.pythonhosted.org [151.101.64.223] :443 (https) TCP · also recorded: dualstack.python.map.fastly.net

systemd › systemd (pid 1193 · systemd)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
pkg-containers.githubusercontent.com [185.199.108.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.109.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.111.154] :443 (https) TCP
ghcr.io [20.29.134.18] :443 (https) TCP

systemd › dockerd (pid 1193 · dockerd)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
pkg-containers.githubusercontent.com [185.199.108.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.109.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.111.154] :443 (https) TCP
ghcr.io [20.29.134.18] :443 (https) TCP

systemd › systemd › systemd › Runner.Worker › bash › pre-commit › python3.12 (pid 3087 · python3.12)

dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › systemd (pid 1996 · systemd)

185.199.111.133 :443 (https) TCP

garnet-labs/openclaw

Kernel-recorded by the Garnet eBPF sensorpinned to commit c75a686

CI/security-fast

run 306080293812026-07-31 05:55:46 UTC

Network Egress

13 destinations · 13 flows · 13 processes

systemd
- systemd[1193 · 1996 · systemd]runner infrastructure
  - systemdRunner.Worker
    - bash
      - node[3230 · node]step: 10. Audit changed GitHub workflows with zizmor
        registry.npmjs.org104.16.1.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - docker[2525 · docker]step: 5. Scan pull request for leaked credentials (trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - pre-commit
        git
        git
        git-remote-http[2749 · git-remote-http]step: 7. Resolve Python runtime
        github.com140.82.116.4:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        python3.12[2947 · 3087 · python3.12]step: 7. Resolve Python runtime · 8. Install pre-commit
        python3.12[2970 · python3.12]step: 7. Resolve Python runtime
        dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        files.pythonhosted.org151.101.128.223:443 (https) · tcpalso recorded: dualstack.python.map.fastly.net
        dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - python3.12[2714 · python3.12]step: 6. Prepare trusted pre-commit config
        dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
  - ghcr.io20.29.134.18:443 (https) · tcp
  - 185.199.111.133:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- hosted-compute-agentRunner.ListenerRunner.Worker
  - bash
    - timeout
      - git
        git
        git-remote-http[2478 · git-remote-http]step: 2. Resolve security diff base
        github.com140.82.116.4:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
- python3.12[2944 · python3.12]step: 7. Resolve Python runtime
  - python3.12[2946 · python3.12]
    - dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - files.pythonhosted.org151.101.64.223:443 (https) · tcpalso recorded: dualstack.python.map.fastly.net
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- dockerd[1193 · dockerd]runner infrastructure
  - pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
  - ghcr.io20.29.134.18:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)

Workload

Repositorygarnet-labs/openclaw

WorkflowCI

Jobsecurity-fast

Run ID30608029381

Profile UUID019fb6be-370b-735e-89d9-e3a228049349

Commit SHAc75a686d782d8be1056f69bb453243ac722ac461

Timestamp2026-07-31 05:55:46 UTC

💡 Reading this review

Runner.Worker
- bash
  - curl
    - example.com
    - localhost(dns resolver)

Italic is runner scaffolding · bold is GitHub-step-attributed lineage · notes are factual context.