Execution chains — analyze

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node › node (pid 2640 · node)

registry.npmjs.org [104.16.4.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node (pid 2875 · node)

registry.npmjs.org [104.16.6.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2655 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-db52c2cf8be544.github.com [140.82.114.21] :443 (https) TCP · also recorded: results-receiver.actions.githubusercontent
blob.blz25prdstrz09a.store.core.windows [20.209.226.1] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
blob.blz25prdstrz09a.store.core.windows [20.209.226.129] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
blob.blz25prdstrz09a.store.core.windows [20.209.227.33] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows

systemd › hosted-compute- › sudo › provjobd1225705 (pid 2049 · provjobd1225705)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-p4a577-public-internal.githubapp.com [20.75.202.224] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-eus-01.githubapp · (github infra)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node (pid 2655 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-db52c2cf8be544.github.com [140.82.114.21] :443 (https) TCP · also recorded: results-receiver.actions.githubusercontent
blob.blz25prdstrz09a.store.core.windows [20.209.226.1] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
blob.blz25prdstrz09a.store.core.windows [20.209.226.129] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
blob.blz25prdstrz09a.store.core.windows [20.209.227.33] :443 (https) TCP · also recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows

systemd › systemd-resolve (pid 506 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › python3 › python3 (pid 1348 · python3)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › hosted-compute- (pid 2029 · hosted-compute-)

glb-p4a577-public-internal.githubapp.com [20.75.202.224] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-eus-01.githubapp · (github infra)

garnet-labs/deepsec

Recorded at the kernel by Garnetfor commit af4ffea (merge ref)

deepsec/analyze

run 342710971012026-09-08 19:49 UTC

Execution chains

10 destinations · 8 processes

systemd
- hosted-compute-agentRunner.ListenerRunner.Worker
  - node[2655 · node]
    - node[2640 · node]
      - registry.npmjs.org104.16.4.34:443 (https) · tcp
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
    - glb-db52c2cf8be544.github.com140.82.114.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
    - blob.blz25prdstrz09a.store.core.windows20.209.226.1:443 (https) · tcpalso recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- hosted-compute-[2029 · hosted-compute-]
  - Runner.Listener
    - Runner.Worker
      - node[2655 · node]
        glb-db52c2cf8be544.github.com140.82.114.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
        blob.blz25prdstrz09a.store.core.windows20.209.226.1:443 (https) · tcpalso recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - bash
        node[2875 · node]
        registry.npmjs.org104.16.6.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd1225705[2049 · provjobd1225705]
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - glb-p4a577-public-internal.githubapp.com20.75.202.224:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-eus-01.githubapp
  - glb-p4a577-public-internal.githubapp.com20.75.202.224:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-eus-01.githubapp
- systemd-resolve[506 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- python3
  - python3[1348 · python3]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)

Run details

Repositorygarnet-labs/deepsec

Workflowdeepsec

Jobanalyze

Run ID34271097101

Profile UUID01a08291-aa18-7b17-a23a-eb5286c7722c

Commit SHAaf4ffea4a70d10efd95125d411fd7ff1010dd6ee(merge ref)

Refrefs/pull/3/merge

Timestamp2026-09-08 19:49:39 UTC

The record is egress-centric; processes without recorded egress do not appear.