Execution chains — install

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node (pid 2636 · node)

registry.npmjs.org [104.16.10.34] :443 (https) TCP
registry.npmjs.org [104.16.11.34] :443 (https) TCP
registry.npmjs.org [104.16.2.34] :443 (https) TCP
registry.npmjs.org [104.16.3.34] :443 (https) TCP
registry.npmjs.org [104.16.5.34] :443 (https) TCP
registry.npmjs.org [104.16.6.34] :443 (https) TCP
registry.npmjs.org [104.16.7.34] :443 (https) TCP
registry.npmjs.org [104.16.8.34] :443 (https) TCP
registry.npmjs.org [104.16.9.34] :443 (https) TCP
localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node › dash › node (pid 2648 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
firstparty-azurefd-prod.trafficmanager.net [13.107.246.40] :443 (https) TCP · also recorded: playwright.afd.azureedge.net, playwright.azureedge.net, s-part-0012.t-0009.t-msedge.net, shed.dual-low.s-part-0012.t-0009.t-msedge
fg.microsoft.map.fastly.net [146.75.30.172] :443 (https) TCP · also recorded: playwright.download.prss.microsoft.com, star.download.prss.microsoft.com.delivery, sundry-f-net.trafficmanager.net

systemd › hosted-compute-agent (pid 2081 · hosted-compute-agent)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-p4a577-public-internal.githubapp.com [20.75.202.224] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-eus-02.githubapp · (github infra)

systemd › hosted-compute-agent › sudo › provjobd3992816129 (pid 2100 · provjobd3992816129)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-p4a577-public-internal.githubapp.com [20.75.202.224] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-eus-02.githubapp · (github infra)

systemd › systemd-resolved (pid 532 · systemd-resolved)

168.63.129.16 :53 (dns) UDP

systemd › python3.12 › python3.12 (pid 1415 · python3.12)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

garnet-labs/express

Recorded at the kernel by Garnetfor commit 1777551 (merge ref)

App install/install

run 368159139682026-10-01 04:39 UTC

Execution chains

15 destinations · 6 processes

systemd
- hosted-compute-agent[2081 · hosted-compute-agent]
  - Runner.ListenerRunner.Worker
    - bash
      - node[2636 · node]step: Install dependencies (lifecycle scripts execute here)
        dash
        node[2648 · node]
        firstparty-azurefd-prod.trafficmanager.net13.107.246.40:443 (https) · tcpalso recorded: playwright.afd.azureedge.net, playwright.azureedge.net, s-part-0012.t-0009.t-msedge.net, shed.dual-low.s-part-0012.t-0009.t-msedge
        fg.microsoft.map.fastly.net146.75.30.172:443 (https) · tcpalso recorded: playwright.download.prss.microsoft.com, star.download.prss.microsoft.com.delivery, sundry-f-net.trafficmanager.net
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        registry.npmjs.org104.16.10.34:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd3992816129[2100 · provjobd3992816129]
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - glb-p4a577-public-internal.githubapp.com20.75.202.224:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-eus-02.githubapp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - glb-p4a577-public-internal.githubapp.com20.75.202.224:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-eus-02.githubapp
- systemd-resolved[532 · systemd-resolved]
  - 168.63.129.16:53 (dns) · udp
- python3.12
  - python3.12[1415 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)

Run details

Repositorygarnet-labs/express

WorkflowApp install

Jobinstall

Run ID36815913968

Profile UUID01a0f5c2-7643-7e4d-9f8f-f1dd858a851f

Commit SHA17775515d97de07dfdef209703a3ed09e9735d8d(merge ref)

Refrefs/pull/19/merge

Timestamp2026-10-01 04:39:13 UTC

The record is egress-centric; processes without recorded egress do not appear.