Execution chains — analyze

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node (pid 2690 · node)

registry.npmjs.org [104.16.3.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node › node (pid 2457 · node)

registry.npmjs.org [104.16.7.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2471 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-db52c2cf8be544.github.com [140.82.112.21] :443 (https) TCP · also recorded: results-receiver.actions.githubusercontent
blob.blz25prdstrz09a.store.core.windows [20.209.226.1] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
blob.blz25prdstrz09a.store.core.windows [20.209.226.129] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
blob.blz25prdstrz09a.store.core.windows [20.209.227.33] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows

systemd › hosted-compute- › sudo › provjobd1285461 (pid 1990 · provjobd1285461)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-2a3c35-public-internal.githubapp.com [140.82.112.23] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-iad-02.githubapp · (github infra)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node (pid 2471 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-db52c2cf8be544.github.com [140.82.112.21] :443 (https) TCP · also recorded: results-receiver.actions.githubusercontent
blob.blz25prdstrz09a.store.core.windows [20.209.226.1] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
blob.blz25prdstrz09a.store.core.windows [20.209.226.129] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
blob.blz25prdstrz09a.store.core.windows [20.209.227.33] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows

systemd › hosted-compute- (pid 1971 · hosted-compute-)

glb-2a3c35-public-internal.githubapp.com [140.82.112.23] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-iad-02.githubapp · (github infra)

systemd › systemd-resolve (pid 556 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › python3 › python3 (pid 1326 · python3)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › systemd-network (pid 721 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-labs/deepsec

Recorded at the kernel by Garnetfor commit b658780 (merge ref)

deepsec/analyze

run 342681611872026-09-08 19:19 UTC

Execution chains

11 destinations · 9 processes

systemd
- hosted-compute-[1971 · hosted-compute-]
  - Runner.Listener
    - Runner.Worker
      - node[2471 · node]
        glb-db52c2cf8be544.github.com140.82.112.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
        blob.blz25prdstrz09a.store.core.windows20.209.226.1:443 (https) · tcpalso recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - bash
        node[2690 · node]
        registry.npmjs.org104.16.3.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd1285461[1990 · provjobd1285461]
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - glb-2a3c35-public-internal.githubapp.com140.82.112.23:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-iad-02.githubapp
  - glb-2a3c35-public-internal.githubapp.com140.82.112.23:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-iad-02.githubapp
- hosted-compute-agentRunner.ListenerRunner.Worker
  - node[2471 · node]
    - node[2457 · node]
      - registry.npmjs.org104.16.7.34:443 (https) · tcp
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
    - glb-db52c2cf8be544.github.com140.82.112.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
    - blob.blz25prdstrz09a.store.core.windows20.209.226.1:443 (https) · tcpalso recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-resolve[556 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- python3
  - python3[1326 · python3]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-network[721 · systemd-network]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositorygarnet-labs/deepsec

Workflowdeepsec

Jobanalyze

Run ID34268161187

Profile UUID01a08276-0edd-7bda-b7de-502c4804bd44

Commit SHAb658780c86b3c01a2ad7fc3225de559e80dc31fe(merge ref)

Refrefs/pull/3/merge

Timestamp2026-09-08 19:19:29 UTC

The record is egress-centric; processes without recorded egress do not appear.