Execution chains — record

systemd › dockerd (pid 1320 · dockerd)

1.1.1.1 :53 (dns) UDP
registry-1.docker.io [100.51.248.20] :443 (https) TCP
registry-1.docker.io [100.59.161.239] :443 (https) TCP
auth.docker.io [104.18.43.178] :443 (https) TCP · also recorded: auth.docker.io.cdn.cloudflare.net
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
d3ipk8a4rcghwr.cloudfront.net [3.169.173.111] :443 (https) TCP · also recorded: production.cloudfront.docker.com
d3ipk8a4rcghwr.cloudfront.net [3.169.173.32] :443 (https) TCP · also recorded: production.cloudfront.docker.com
d3ipk8a4rcghwr.cloudfront.net [3.169.173.6] :443 (https) TCP · also recorded: production.cloudfront.docker.com
registry-1.docker.io [52.72.129.195] :443 (https) TCP
registry-1.docker.io [98.90.183.39] :443 (https) TCP

systemd › containerd-shim-runc-v2 › containerd-shim-runc-v2 › go (pid 2974 · go)

localhost [127.0.0.11] :39581, 53 (dns) UDP · (dns resolver)
proxy.golang.org [142.251.34.209] :443 (https) TCP
storage.googleapis.com [74.125.199.207] :443 (https) TCP

systemd › containerd-shim-runc-v2 › docker-init › go (pid 2974 · go)

localhost [127.0.0.11] :39581, 53 (dns) UDP · (dns resolver)
proxy.golang.org [142.251.34.209] :443 (https) TCP

systemd › containerd-shim › docker-init › go (pid 2974 · go)

localhost [127.0.0.11] :39581, 53 (dns) UDP · (dns resolver)
proxy.golang.org [142.251.34.209] :443 (https) TCP
storage.googleapis.com [74.125.199.207] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node (pid 2710 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › sudo › sudo (pid 2036 · sudo)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-2a3c35-public-internal.githubapp.com [140.82.113.24] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-iad-02.githubapp · (github infra)

systemd › hosted-compute- (pid 2011 · hosted-compute-)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
140.82.112.24 :443 (https) TCP
glb-2a3c35-public-internal.githubapp.com [140.82.113.24] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-iad-02.githubapp · (github infra)
140.82.114.24 :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node (pid 2710 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › systemd-resolve (pid 549 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › python3 › python3 (pid 1348 · python3)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

garnet-labs/trufflehog

Recorded at the kernel by Garnetfor commit fec92fa

Garnet Dependabot Record/record

run 339421321612026-09-05 03:34 UTC

Execution chains

18 destinations · 10 processes

systemd
- hosted-compute-[2011 · hosted-compute-]
  - Runner.ListenerRunner.Worker
    - bash
      - node[2710 · node]step: Run dependency workload only inside isolated containers (node control/.github/scripts/garnet-dependabot-record.mjs run)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - sudo[2036 · sudo]
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - glb-2a3c35-public-internal.githubapp.com140.82.113.24:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-iad-02.githubapp
  - 140.82.112.24:443 (https) · tcp
  - 140.82.114.24:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - glb-2a3c35-public-internal.githubapp.com140.82.113.24:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-iad-02.githubapp
- hosted-compute-agentRunner.ListenerRunner.Worker
  - bash
    - node[2710 · node]step: Run dependency workload only inside isolated containers (node control/.github/scripts/garnet-dependabot-record.mjs run)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- dockerd[1320 · dockerd]
  - 1.1.1.1:53 (dns) · udp
  - registry-1.docker.io100.51.248.20:443 (https) · tcp
  - auth.docker.io104.18.43.178:443 (https) · tcpalso recorded: auth.docker.io.cdn.cloudflare.net
  - d3ipk8a4rcghwr.cloudfront.net3.169.173.111:443 (https) · tcpalso recorded: production.cloudfront.docker.com
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- containerd-shim-runc-v2
  - containerd-shim-runc-v2
    - go[2974 · go]
      - proxy.golang.org142.251.34.209:443 (https) · tcp
      - storage.googleapis.com74.125.199.207:443 (https) · tcp
      - localhost127.0.0.11:39581, 53 (dns) · udp(dns resolver)
  - docker-init
    - go[2974 · go]
      - proxy.golang.org142.251.34.209:443 (https) · tcp
      - localhost127.0.0.11:39581, 53 (dns) · udp(dns resolver)
- containerd-shimdocker-init
  - go[2974 · go]
    - proxy.golang.org142.251.34.209:443 (https) · tcp
    - storage.googleapis.com74.125.199.207:443 (https) · tcp
    - localhost127.0.0.11:39581, 53 (dns) · udp(dns resolver)
- systemd-resolve[549 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- python3
  - python3[1348 · python3]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)

Run details

Repositorygarnet-labs/trufflehog

WorkflowGarnet Dependabot Record

Jobrecord

Run ID33942132161

Profile UUID01a06fa2-2605-7a75-93a0-6d7ba3538bee

Commit SHAfec92fa914dc934b4530ac5218d29aba51d2aa11

Timestamp2026-09-05 03:34:46 UTC

The record is egress-centric; processes without recorded egress do not appear.