Execution chains — py-install

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2516 · node)

releases.astral.sh [104.26.12.77] :443 (https) TCP
raw.githubusercontent.com [185.199.111.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2461 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
api.github.com [140.82.112.6] :443 (https) TCP
github.com [140.82.113.3] :443 (https) TCP
release-assets.githubusercontent.com [185.199.109.133] :443 (https) TCP

systemd › python3.12 › http (pid 2568 · http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
motd.ubuntu.com [3.254.173.149] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › sudo › apt-get › http (pid 2552 · http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
packages.microsoft.com [13.107.246.71] :443 (https) TCP · also recorded: part-0043.t-0009.t-msedge.net, shed.dual-low.part-0043.t-0009.t-msedge, azurefd-critical-t-prod-stage2.trafficmanager, pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node › bash › python3.14 (pid 2491 · python3.14)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.128.223] :443 (https) TCP · also recorded: files.pythonhosted.org
dualstack.python.map.fastly.net [151.101.192.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › uv › git › git › git (pid 3296 · git)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.113.3] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › uv (pid 3236 · uv)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
pypi.org [151.101.0.223] :443 (https) TCP
dualstack.python.map.fastly.net [151.101.128.223] :443 (https) TCP · also recorded: files.pythonhosted.org
dualstack.python.map.fastly.net [151.101.192.223] :443 (https) TCP · also recorded: files.pythonhosted.org
pypi.org [151.101.64.223] :443 (https) TCP

systemd › systemd-resolve (pid 482 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › python3.12 › python3.12 (pid 1201 · python3.12)

168.63.129.16 :32526, 80 (http) TCP

systemd › python3.12 › http (pid 2582 · http)

esm.ubuntu.com [185.125.190.23] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › sudo › apt-get › http (pid 2556 · http)

azure.archive.ubuntu.com [20.106.104.242] :80 (http) TCP · also recorded: cloud-mirror-lb.westus3.cloudapp.azure.com, ubuntu-archive-asm.trafficmanager.net

systemd › hosted-compute- (pid 1787 · hosted-compute-)

20.75.202.224 :443 (https) TCP

systemd › hosted-compute- › sudo › sudo (pid 1803 · sudo)

20.75.202.224 :443 (https) TCP

systemd › systemd-network (pid 657 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-labs/posthog

Recorded at the kernel by Garnetfor commit f7c6f06 (merge ref)

Garnet Runtime Visibility/py-install

run 419144593452026-11-04 21:18 UTC

Execution chains

17 destinations · 14 processes

systemd
- hosted-compute-[1787 · hosted-compute-]
  - Runner.Listener
    - Runner.Worker
      - bash
        sudo
        apt-get
        http[2552 · http]
        packages.microsoft.com13.107.246.71:443 (https) · tcpalso recorded: part-0043.t-0009.t-msedge.net, shed.dual-low.part-0043.t-0009.t-msedge, azurefd-critical-t-prod-stage2.trafficmanager, pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        http[2556 · http]
        azure.archive.ubuntu.com20.106.104.242:80 (http) · tcpalso recorded: cloud-mirror-lb.westus3.cloudapp.azure.com, ubuntu-archive-asm.trafficmanager.net
        uv[3236 · uv]
        git
        git
        git[3296 · git]
        github.com140.82.113.3:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        pypi.org151.101.0.223:443 (https) · tcp
        dualstack.python.map.fastly.net151.101.128.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[2461 · 2516 · node]
        bash
        python3.14[2491 · python3.14]
        dualstack.python.map.fastly.net151.101.128.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        releases.astral.sh104.26.12.77:443 (https) · tcp
        raw.githubusercontent.com185.199.111.133:443 (https) · tcp
        api.github.com140.82.112.6:443 (https) · tcp
        github.com140.82.113.3:443 (https) · tcp
        release-assets.githubusercontent.com185.199.109.133:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - sudo[1803 · sudo]
      - 20.75.202.224:443 (https) · tcp
  - 20.75.202.224:443 (https) · tcp
- python3.12
  - http[2568 · http]
    - motd.ubuntu.com3.254.173.149:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - python3.12[1201 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
  - http[2582 · http]
    - esm.ubuntu.com185.125.190.23:443 (https) · tcp
- systemd-resolve[482 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- systemd-network[657 · systemd-network]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositorygarnet-labs/posthog

WorkflowGarnet Runtime Visibility

Jobpy-install

Run ID41914459345

Profile UUID01a1a86d-8a8e-7ac5-8a84-4cf644635734

Commit SHAf7c6f0602eedc7954934f0e05cb29d2f56b65437(merge ref)

Refrefs/pull/237/merge

Timestamp2026-11-04 21:18:26 UTC

The record is egress-centric; processes without recorded egress do not appear.