Execution chains — security-fast

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node (pid 2892 · node)

registry.npmjs.org [104.16.1.34] :443 (https) TCP
registry.npmjs.org [104.16.9.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › timeout › git › git › git-remote-http (pid 2269 · git-remote-http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.112.3] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › bash › git › git › git-remote-http (pid 2598 · git-remote-http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.112.3] :443 (https) TCP

systemd › dockerd (pid 948 · dockerd)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
ghcr.io [140.82.112.34] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.109.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.110.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.111.154] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › docker (pid 2302 · docker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › python3.12 (pid 2484 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [140.248.144.223] :443 (https) TCP · also recorded: files.pythonhosted.org
pypi.org [151.101.64.223] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › bash › python3.12 › python3.12 (pid 2740 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [140.248.144.223] :443 (https) TCP · also recorded: files.pythonhosted.org
pypi.org [151.101.64.223] :443 (https) TCP

systemd › python3.12 › python3.12 (pid 2716 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
pypi.org [151.101.64.223] :443 (https) TCP

systemd › python3.12 (pid 2714 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
pypi.org [151.101.0.223] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › bash › python3.12 (pid 2717 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [140.248.144.223] :443 (https) TCP · also recorded: files.pythonhosted.org
pypi.org [151.101.192.223] :443 (https) TCP

systemd › systemd-resolve (pid 388 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › python3.12 › python3.12 (pid 1574 · python3.12)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › hosted-compute- › sudo › provjobd2874414 (pid 1904 · provjobd2874414)

20.75.202.224 :443 (https) TCP

garnet-labs/openclaw

Recorded at the kernel by Garnetfor commit e5c114d (merge ref)

CI/security-fast

run 320562271832026-08-17 18:44 UTC

Execution chains

15 destinations · 13 processes

systemd
- hosted-compute-
  - Runner.ListenerRunner.Worker
    - bash
      - node[2892 · node]step: Audit changed GitHub workflows with zizmor
        registry.npmjs.org104.16.1.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - bash
        git
        git
        git-remote-http[2598 · git-remote-http]step: Resolve Python runtime
        github.com140.82.112.3:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        python3.12[2717 · python3.12]step: Resolve Python runtime
        python3.12[2740 · python3.12]
        dualstack.python.map.fastly.net140.248.144.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        pypi.org151.101.64.223:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        dualstack.python.map.fastly.net140.248.144.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        pypi.org151.101.192.223:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - docker[2302 · docker]step: Scan pull request for leaked credentials (trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - python3.12[2484 · python3.12]step: Prepare trusted pre-commit config
        dualstack.python.map.fastly.net140.248.144.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        pypi.org151.101.64.223:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd2874414[1904 · provjobd2874414]
      - 20.75.202.224:443 (https) · tcp
- hosted-compute-agentRunner.ListenerRunner.Worker
  - bash
    - timeout
      - git
        git
        git-remote-http[2269 · git-remote-http]step: Resolve security diff base
        github.com140.82.112.3:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
- dockerd[948 · dockerd]
  - ghcr.io140.82.112.34:443 (https) · tcp
  - pkg-containers.githubusercontent.com185.199.109.154:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- python3.12[2714 · python3.12]step: Resolve Python runtime
  - python3.12[2716 · python3.12]
    - pypi.org151.101.64.223:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - python3.12[1574 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
  - pypi.org151.101.0.223:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-resolve[388 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp

Run details

Repositorygarnet-labs/openclaw

WorkflowCI

Jobsecurity-fast

Run ID32056227183

Profile UUID01a0110a-0bf6-7017-81bb-393e74508e9a

Commit SHAe5c114d04925f6bb0fa7b3020c1437220787a498(merge ref)

Refrefs/pull/29/merge

Timestamp2026-08-17 18:44:23 UTC

The record is egress-centric; processes without recorded egress do not appear.