Execution chains — record

systemd › dockerd (pid 1097 · dockerd)

1.1.1.1 :53 (dns) UDP
registry-1.docker.io [100.59.161.239] :443 (https) TCP
localhost [127.0.0.1] :38432, 42267, 43871, 51488 UDP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
auth.docker.io [172.64.144.78] :443 (https) TCP · also recorded: auth.docker.io.cdn.cloudflare.net
registry-1.docker.io [3.218.229.48] :443 (https) TCP
registry-1.docker.io [3.221.100.247] :443 (https) TCP
registry-1.docker.io [44.205.219.111] :443 (https) TCP
registry-1.docker.io [44.205.59.182] :443 (https) TCP
d3ipk8a4rcghwr.cloudfront.net [65.8.20.55] :443 (https) TCP · also recorded: production.cloudfront.docker.com
d3ipk8a4rcghwr.cloudfront.net [65.8.20.67] :443 (https) TCP · also recorded: production.cloudfront.docker.com
d3ipk8a4rcghwr.cloudfront.net [65.8.20.7] :443 (https) TCP · also recorded: production.cloudfront.docker.com

systemd › containerd-shim-runc-v2 › containerd-shim-runc-v2 › go (pid 2756 · go)

localhost [127.0.0.11] :53 (dns) UDP · (dns resolver)
proxy.golang.org [142.251.215.81] :443 (https) TCP
storage.googleapis.com [142.251.41.27] :443 (https) TCP

systemd › containerd-shim-runc-v2 › docker-init › go (pid 2756 · go)

localhost [127.0.0.11] :53 (dns) UDP · (dns resolver)
proxy.golang.org [142.251.215.81] :443 (https) TCP

systemd › hosted-compute- › sudo › provjobd2670475 (pid 1833 · provjobd2670475)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
hosted-compute-watchdog-prod-iad-02.githubapp [140.82.112.23] :443 (https) TCP · also recorded: glb-2a3c35-public-internal.githubapp.com · (github infra)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node (pid 2492 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node (pid 2492 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- (pid 1817 · hosted-compute-)

140.82.114.24 :443 (https) TCP

systemd › python3 › python3 (pid 1259 · python3)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › systemd-resolve (pid 423 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › systemd-network (pid 648 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-labs/trufflehog

Recorded at the kernel by Garnetfor commit fec92fa

Garnet Dependabot Record/record

run 339421321612026-09-05 03:34 UTC

Execution chains

20 destinations · 10 processes

systemd
- hosted-compute-[1817 · hosted-compute-]
  - Runner.ListenerRunner.Worker
    - bash
      - node[2492 · node]step: Run dependency workload only inside isolated containers (node control/.github/scripts/garnet-dependabot-record.mjs run)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd2670475[1833 · provjobd2670475]
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - hosted-compute-watchdog-prod-iad-02.githubapp140.82.112.23:443 (https) · tcp(github infra)also recorded: glb-2a3c35-public-internal.githubapp.com
  - 140.82.114.24:443 (https) · tcp
- hosted-compute-agentRunner.ListenerRunner.Worker
  - bash
    - node[2492 · node]step: Run dependency workload only inside isolated containers (node control/.github/scripts/garnet-dependabot-record.mjs run)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- dockerd[1097 · dockerd]
  - 1.1.1.1:53 (dns) · udp
  - registry-1.docker.io100.59.161.239:443 (https) · tcp
  - localhost127.0.0.1:38432, 42267, 43871, 51488 · udp
  - auth.docker.io172.64.144.78:443 (https) · tcpalso recorded: auth.docker.io.cdn.cloudflare.net
  - d3ipk8a4rcghwr.cloudfront.net65.8.20.55:443 (https) · tcpalso recorded: production.cloudfront.docker.com
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- containerd-shim-runc-v2
  - containerd-shim-runc-v2
    - go[2756 · go]
      - proxy.golang.org142.251.215.81:443 (https) · tcp
      - storage.googleapis.com142.251.41.27:443 (https) · tcp
      - localhost127.0.0.11:53 (dns) · udp(dns resolver)
  - docker-init
    - go[2756 · go]
      - proxy.golang.org142.251.215.81:443 (https) · tcp
      - localhost127.0.0.11:53 (dns) · udp(dns resolver)
- python3
  - python3[1259 · python3]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-resolve[423 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- systemd-network[648 · systemd-network]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositorygarnet-labs/trufflehog

WorkflowGarnet Dependabot Record

Jobrecord

Run ID33942132161

Profile UUID01a06fa2-3d06-7d6c-823a-cdde44401d3c

Commit SHAfec92fa914dc934b4530ac5218d29aba51d2aa11

Timestamp2026-09-05 03:34:54 UTC

The record is egress-centric; processes without recorded egress do not appear.