garnet-labs/posthog

Kernel-recorded by the Garnet eBPF sensorpinned to commit f10b5ac (merge ref)

Garnet Runtime Visibility/dep-install

run 311318622572026-08-06 23:43:18 UTC

Network Egress

22 destinations · 22 flows · 11 processes

recorded without an execution chain:no_bad_egress_domain

systemd
- hosted-compute-
  - Runner.Listener
    - Runner.Worker
      - bash
        MainThread
        sh
        sh
        node-gyp
        nodejs.org104.16.212.131:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        MainThread
        localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        github.com140.82.112.3:443 (https) · tcp
        github.com140.82.114.4:443 (https) · tcp(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        release-assets.githubusercontent.com185.199.109.133:443 (https) · tcp(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        release-assets.githubusercontent.com185.199.110.133:443 (https) · tcp
        registry.npmjs.org104.16.0.34:443 (https) · tcp
        registry.npmjs.org104.16.4.34:443 (https) · tcp(detection: interpreter_shell_spawn)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        codeload.github.com140.82.114.10:443 (https) · tcp
      - node
        node
        registry.npmjs.org104.16.4.34:443 (https) · tcp(detection: interpreter_shell_spawn)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        api.github.com140.82.113.6:443 (https) · tcp(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        github.com140.82.114.4:443 (https) · tcp(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        release-assets.githubusercontent.com185.199.109.133:443 (https) · tcp(detection: credentials_files_access)(detection: interpreter_shell_spawn)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
  - sudo
    - provjobd2580021
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
- hosted-compute-agent
  - Runner.Listener
    - Runner.Worker
      - node
        node
        registry.npmjs.org104.16.4.34:443 (https) · tcp(detection: interpreter_shell_spawn)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        api.github.com140.82.113.6:443 (https) · tcp(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        github.com140.82.114.4:443 (https) · tcp(detection: credentials_files_access)(detection: interpreter_shell_spawn)
        release-assets.githubusercontent.com185.199.109.133:443 (https) · tcp(detection: credentials_files_access)(detection: interpreter_shell_spawn)
- systemd-network
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Assertions

1 hit

ATTENTIONno_bad_egress_domain

Workload

Repositorygarnet-labs/posthog

WorkflowGarnet Runtime Visibility

Jobdep-install

Run ID31131862257

Profile UUID019fd975-b687-76a2-a58b-db2d15ab3dd7

Commit SHAf10b5ac216c44263a465e99450257746661c8540(merge ref)

Refrefs/pull/93/merge

Timestamp2026-08-06 23:43:18 UTC

💡 How to read this

Runner.Worker
- bash
  - curl
    - example.com
    - localhost(dns resolver)