Garnet Runtime Review

garnet-labs/openclaw

Kernel-recorded by the Garnet eBPF sensorpinned to commit ffbc57a

CI/security-fast

run 30617127417

Network Egress

8 destinations · 8 flows · 8 processes
  • systemd
    • dockerd[1211 · dockerd]runner infrastructure
      • ghcr.io140.82.112.33:443 (https) · tcp
      • pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
      • localhost127.0.0.53:53 (dns) · udp(dns resolver)
    • hosted-compute-agentRunner.ListenerRunner.Worker
      • bash
        • timeout
          • git
            • git
              • git-remote-http[2426 · git-remote-http]step: 2. Resolve security diff base
                • github.com140.82.112.3:443 (https) · tcp
                • localhost127.0.0.53:53 (dns) · udp(dns resolver)
    • hosted-compute-
      • Runner.ListenerRunner.Worker
        • bash
          • pre-commit
            • git
              • git
                • git-remote-http[2836 · git-remote-http]step: 7. Resolve Python runtime
                  • github.com140.82.112.3:443 (https) · tcp
                  • localhost127.0.0.53:53 (dns) · udp(dns resolver)
            • python3.12[2875 · python3.12]step: 7. Resolve Python runtime
              • files.pythonhosted.org151.101.128.223:443 (https) · tcpalso recorded: dualstack.python.map.fastly.net
              • pypi.org151.101.192.223:443 (https) · tcp
              • localhost127.0.0.53:53 (dns) · udp(dns resolver)
          • python3.12[2642 · python3.12]step: 6. Prepare trusted pre-commit config
            • pypi.org151.101.192.223:443 (https) · tcp
            • localhost127.0.0.53:53 (dns) · udp(dns resolver)
          • docker[2460 · docker]step: 5. Scan pull request for leaked credentials (trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49)
            • localhost127.0.0.53:53 (dns) · udp(dns resolver)
      • sudo
        • sudo[2030 · sudo]runner infrastructure
          • localhost127.0.0.53:53 (dns) · udp(dns resolver)
    • python3.12
      • python3.12[2874 · python3.12]step: 7. Resolve Python runtime
        • pypi.org151.101.0.223:443 (https) · tcp
        • localhost127.0.0.53:53 (dns) · udp(dns resolver)
Workload
Repositorygarnet-labs/openclaw
WorkflowCI
Jobsecurity-fast
Profile UUID019fb756-9789-7110-a7ec-6fe0a2fb76e3
Timestamp
💡 Reading this review
  • Runner.Worker
    • bash
      • curl
        • example.com
        • localhost(dns resolver)

Italic is runner scaffolding · bold is GitHub-step-attributed lineage · notes are factual context.

Profile your runs with Garnet

Kernel-level visibility for every CI job — one step in your GitHub Actions workflow.