Execution chains — security-fast

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node (pid 3174 · node)

registry.npmjs.org [104.16.3.34] :443 (https) TCP
registry.npmjs.org [104.16.7.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › timeout › git › git › git-remote-http (pid 2530 · git-remote-http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.114.3] :443 (https) TCP

systemd › systemd › systemd › Runner.Worker › bash › docker (pid 2574 · docker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › systemd › systemd › Runner.Worker › bash › pre-commit › git › git › git-remote-http (pid 2840 · git-remote-http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.114.3] :443 (https) TCP

systemd › systemd › systemd › Runner.Worker › bash › python3.12 (pid 2764 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › pre-commit › git › git › git-remote-http (pid 2957 · git-remote-http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.114.3] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › pre-commit › python3.12 › python3.12 (pid 3019 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › python3.12 › python3.12 (pid 2995 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.128.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › pre-commit › python3.12 (pid 2996 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.128.223] :443 (https) TCP · also recorded: files.pythonhosted.org
files.pythonhosted.org [151.101.64.223] :443 (https) TCP · also recorded: dualstack.python.map.fastly.net

systemd › python3.12 (pid 2993 · python3.12)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › hosted-compute- (pid 2076 · hosted-compute-)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
hosted-compute-request-orchestrator-prod-iad-01 [140.82.112.23] :443 (https) TCP · also recorded: glb-2a3c35-public-internal.githubapp.com · (github infra)
140.82.112.24 :443 (https) TCP
140.82.113.23 :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker (pid 2217 · Runner.Worker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › dockerd (pid 1186 · dockerd)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
pkg-containers.githubusercontent.com [185.199.108.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.109.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.110.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.111.154] :443 (https) TCP
ghcr.io [20.29.134.18] :443 (https) TCP

systemd › hosted-compute- › sudo › provjobd8057390 (pid 2100 · provjobd8057390)

140.82.114.24 :443 (https) TCP

systemd › systemd-resolve (pid 531 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › python3.12 › python3.12 (pid 1761 · python3.12)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › systemd-network (pid 719 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-labs/openclaw

Recorded at the kernel by Garnetfor commit 8f8dc1e (merge ref)

CI/security-fast

run 320581802922026-08-17 19:07 UTC

Execution chains

19 destinations · 17 processes

systemd
- hosted-compute-[2076 · hosted-compute-]
  - Runner.Listener
    - Runner.Worker[2217 · Runner.Worker]
      - bash
        node[3174 · node]step: Audit changed GitHub workflows with zizmor
        registry.npmjs.org104.16.3.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        pre-commit
        git
        git
        git-remote-http[2957 · git-remote-http]step: Resolve Python runtime
        github.com140.82.114.3:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        python3.12[2996 · python3.12]step: Resolve Python runtime
        python3.12[3019 · python3.12]
        dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        dualstack.python.map.fastly.net151.101.128.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        files.pythonhosted.org151.101.64.223:443 (https) · tcpalso recorded: dualstack.python.map.fastly.net
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd8057390[2100 · provjobd8057390]
      - 140.82.114.24:443 (https) · tcp
  - 140.82.112.24:443 (https) · tcp
  - 140.82.113.23:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - hosted-compute-request-orchestrator-prod-iad-01140.82.112.23:443 (https) · tcp(github infra)also recorded: glb-2a3c35-public-internal.githubapp.com
- hosted-compute-agentRunner.ListenerRunner.Worker
  - bash
    - timeout
      - git
        git
        git-remote-http[2530 · git-remote-http]step: Resolve security diff base
        github.com140.82.114.3:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemdsystemdRunner.Worker
  - bash
    - docker[2574 · docker]step: Scan pull request for leaked credentials (trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
    - pre-commit
      - git
        git
        git-remote-http[2840 · git-remote-http]step: Resolve Python runtime
        github.com140.82.114.3:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
    - python3.12[2764 · python3.12]step: Prepare trusted pre-commit config
      - dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- python3.12[2993 · python3.12]step: Resolve Python runtime
  - python3.12[2995 · python3.12]
    - dualstack.python.map.fastly.net151.101.128.223:443 (https) · tcpalso recorded: files.pythonhosted.org
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - python3.12[1761 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
  - dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- dockerd[1186 · dockerd]
  - pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
  - ghcr.io20.29.134.18:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-resolve[531 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- systemd-network[719 · systemd-network]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositorygarnet-labs/openclaw

WorkflowCI

Jobsecurity-fast

Run ID32058180292

Profile UUID01a0111f-2339-723c-a46d-b6201b53a562

Commit SHA8f8dc1e10b7a93e0c40d984c306bc324f2b6f65f(merge ref)

Refrefs/pull/28/merge

Timestamp2026-08-17 19:07:27 UTC

The record is egress-centric; processes without recorded egress do not appear.