Execution chains — review

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node › node (pid 2574 · node)

registry.npmjs.org [104.16.0.34] :443 (https) TCP
registry.npmjs.org [104.16.1.34] :443 (https) TCP
registry.npmjs.org [104.16.10.34] :443 (https) TCP
registry.npmjs.org [104.16.11.34] :443 (https) TCP
registry.npmjs.org [104.16.2.34] :443 (https) TCP
registry.npmjs.org [104.16.3.34] :443 (https) TCP
registry.npmjs.org [104.16.5.34] :443 (https) TCP
registry.npmjs.org [104.16.6.34] :443 (https) TCP
registry.npmjs.org [104.16.7.34] :443 (https) TCP
registry.npmjs.org [104.16.8.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node (pid 2562 · node)

registry.npmjs.org [104.16.11.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
codeload.github.com [140.82.112.10] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node (pid 2562 · node)

registry.npmjs.org [104.16.11.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
codeload.github.com [140.82.112.10] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker (pid 2099 · Runner.Worker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › node › dash › node › codex (pid 2761 · codex)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
a5a0de4e3add4334.vercel-dns-013.com [64.239.109.65] :443 (https) TCP · also recorded: ai-gateway.vercel.sh
a5a0de4e3add4334.vercel-dns-013.com [64.239.123.65] :443 (https) TCP · also recorded: ai-gateway.vercel.sh

systemd › hosted-compute- (pid 2026 · hosted-compute-)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
hosted-compute-watchdog-prod-iad-01.githubapp [140.82.112.24] :443 (https) TCP · also recorded: glb-2a3c35-public-internal.githubapp.com · (github infra)
140.82.113.24 :443 (https) TCP

systemd › hosted-compute- › sudo › provjobd2173816 (pid 2046 · provjobd2173816)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
hosted-compute-watchdog-prod-iad-01.githubapp [140.82.114.23] :443 (https) TCP · also recorded: glb-2a3c35-public-internal.githubapp.com · (github infra)

systemd › systemd-resolve (pid 523 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › python3 › python3 (pid 1440 · python3)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › systemd-network (pid 741 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-labs/dub

Recorded at the kernel by Garnetfor commit be48d19 (merge ref)

DeepSec review/review

run 344379486332026-09-10 04:40 UTC

Execution chains

20 destinations · 10 processes

systemd
- hosted-compute-[2026 · hosted-compute-]
  - Runner.Listener
    - Runner.Worker[2099 · Runner.Worker]
      - bash
        node[2562 · node]step: Install DeepSec and the Garnet plugin
        node[2574 · node]
        registry.npmjs.org104.16.0.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        dash
        node
        codex[2761 · codex]step: Review the pull request diff with DeepSec
        a5a0de4e3add4334.vercel-dns-013.com64.239.109.65:443 (https) · tcpalso recorded: ai-gateway.vercel.sh
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        registry.npmjs.org104.16.11.34:443 (https) · tcp
        codeload.github.com140.82.112.10:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd2173816[2046 · provjobd2173816]
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - hosted-compute-watchdog-prod-iad-01.githubapp140.82.114.23:443 (https) · tcp(github infra)also recorded: glb-2a3c35-public-internal.githubapp.com
  - 140.82.113.24:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - hosted-compute-watchdog-prod-iad-01.githubapp140.82.112.24:443 (https) · tcp(github infra)also recorded: glb-2a3c35-public-internal.githubapp.com
- hosted-compute-agentRunner.ListenerRunner.Worker
  - bash
    - node[2562 · node]step: Install DeepSec and the Garnet plugin
      - registry.npmjs.org104.16.11.34:443 (https) · tcp
      - codeload.github.com140.82.112.10:443 (https) · tcp
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-resolve[523 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- python3
  - python3[1440 · python3]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-network[741 · systemd-network]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositorygarnet-labs/dub

WorkflowDeepSec review

Jobreview

Run ID34437948633

Profile UUID01a0899d-da32-737f-b24e-b95519db84d8

Commit SHAbe48d19d73e3731ce5102baba8dac71e43b6ece2(merge ref)

Refrefs/pull/36/merge

Timestamp2026-09-10 04:40:12 UTC

The record is egress-centric; processes without recorded egress do not appear.