Execution Profile

garnet-org/action

Kernel-recorded by the Garnet eBPF sensorpinned to commit 80e1283 (merge ref)

CI/build-and-verify

run 31144628479

Network Egress

5 destinations · 6 flows · 7 processes
recorded without an execution chain:no_bad_egress_domain
  • systemd
    • hosted-compute-agent[1973 · hosted-compute-agent]runner infrastructure
      • Runner.Listener
        • Runner.Worker[2083 · Runner.Worker]runner infrastructure
          • bash
            • node[2518 · node]step: 3. Install dependencies
              • registry.npmjs.org104.16.6.34:443 (https) · tcp
              • localhost127.0.0.53:53 (dns) · udp(dns resolver)
          • node[2486 · node]runner infrastructure
            • api.github.com140.82.114.6:443 (https) · tcp
            • localhost127.0.0.53:53 (dns) · udp(dns resolver)
          • localhost127.0.0.53:53 (dns) · udp(dns resolver)
      • sudo
        • provjobd3065238937[1992 · provjobd3065238937]runner infrastructure
          • glb-p4a577-public-internal.githubapp.com20.75.202.224:443 (https) · tcpalso recorded: hosted-compute-watchdog-prod-eus-01.githubapp
          • localhost127.0.0.53:53 (dns) · udp(dns resolver)
      • glb-p4a577-public-internal.githubapp.com20.75.202.224:443 (https) · tcpalso recorded: hosted-compute-watchdog-prod-eus-01.githubapp
    • python3.12
      • python3.12[1374 · python3.12]runner infrastructure
        • 168.63.129.16:32526, 80 (http) · tcp
    • systemd-resolved[508 · systemd-resolved]runner infrastructure
      • 168.63.129.16:53 (dns) · udp

Assertions

2 hits
ATTENTIONno_bad_egress_domain
FAILno_code_injection_via_proc_memory
Workload
Repositorygarnet-org/action
WorkflowCI
Jobbuild-and-verify
Run ID31144628479
Profile UUID019fda47-9a3a-74e8-bf92-d9a9e6321316
Commit SHA80e128337a0d5d4d97f57e79cec8ab2ffd9f1124(merge ref)
Refrefs/pull/122/merge
Timestamp
💡 How to read this
  • Runner.Worker
    • bash
      • curl
        • example.com
        • localhost(dns resolver)

Put the record on your pull requests

Garnet records what your code actually did when it ran — one step in your GitHub Actions workflow.

Read the docs