Execution chains — py-install

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2713 · node)

releases.astral.sh [104.26.13.77] :443 (https) TCP
raw.githubusercontent.com [185.199.111.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2657 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [172.182.252.133] :443 (https) TCP
api.github.com [172.182.252.137] :443 (https) TCP
raw.githubusercontent.com [185.199.110.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node › bash › python3.14 (pid 2688 · python3.14)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org
dualstack.python.map.fastly.net [151.101.64.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › sudo › apt-get › http (pid 2750 · http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
packages.microsoft.com [13.107.213.69] :443 (https) TCP · also recorded: part-0041.t-0009.t-msedge.net, shed.dual-low.part-0041.t-0009.t-msedge, azurefd-critical-t-prod-stage2.trafficmanager, pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01

systemd › python3.12 › http (pid 2771 · http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
motd.ubuntu.com [34.253.181.30] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › uv › git › git › git (pid 3497 · git)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [172.182.252.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › uv (pid 3420 · uv)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org
pypi.org [151.101.128.223] :443 (https) TCP
pypi.org [151.101.192.223] :443 (https) TCP
dualstack.python.map.fastly.net [151.101.64.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › hosted-compute- › Runner.Listener › Runner.Worker (pid 2218 · Runner.Worker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- (pid 2087 · hosted-compute-)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
20.75.202.224 :443 (https) TCP

systemd › systemd-resolve (pid 518 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › python3 › python3 (pid 1404 · python3)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › hosted-compute- › sudo › sudo (pid 2112 · sudo)

20.75.202.224 :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › sudo › apt-get › http (pid 3076 · http)

azure.archive.ubuntu.com [40.81.13.82] :80 (http) TCP · also recorded: cloud-mirror-lb.westus.cloudapp.azure.com, ubuntu-archive-asm.trafficmanager.net

systemd › python3.12 › http (pid 2800 · http)

esm.ubuntu.com [91.189.91.46] :443 (https) TCP

systemd › systemd-network (pid 728 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-labs/posthog

Recorded at the kernel by Garnetfor commit f3a7de0 (merge ref)

Garnet Runtime Visibility/py-install

run 419746151142026-11-05 06:07 UTC

Execution chains

18 destinations · 15 processes

systemd
- hosted-compute-[2087 · hosted-compute-]
  - Runner.Listener
    - Runner.Worker[2218 · Runner.Worker]
      - node[2657 · 2713 · node]
        bash
        python3.14[2688 · python3.14]step: <unknown>
        dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        releases.astral.sh104.26.13.77:443 (https) · tcp
        raw.githubusercontent.com185.199.111.133:443 (https) · tcp
        github.com172.182.252.133:443 (https) · tcp
        api.github.com172.182.252.137:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - bash
        sudo
        apt-get
        http[2750 · http]
        packages.microsoft.com13.107.213.69:443 (https) · tcpalso recorded: part-0041.t-0009.t-msedge.net, shed.dual-low.part-0041.t-0009.t-msedge, azurefd-critical-t-prod-stage2.trafficmanager, pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        http[3076 · http]
        azure.archive.ubuntu.com40.81.13.82:80 (http) · tcpalso recorded: cloud-mirror-lb.westus.cloudapp.azure.com, ubuntu-archive-asm.trafficmanager.net
        uv[3420 · uv]
        git
        git
        git[3497 · git]
        github.com172.182.252.133:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        pypi.org151.101.128.223:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - sudo[2112 · sudo]
      - 20.75.202.224:443 (https) · tcp
  - 20.75.202.224:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- python3.12
  - http[2771 · http]
    - motd.ubuntu.com34.253.181.30:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - http[2800 · http]
    - esm.ubuntu.com91.189.91.46:443 (https) · tcp
- systemd-resolve[518 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- python3
  - python3[1404 · python3]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-network[728 · systemd-network]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositorygarnet-labs/posthog

WorkflowGarnet Runtime Visibility

Jobpy-install

Run ID41974615114

Profile UUID01a1aa51-d937-7beb-8821-b021d9c6a512

Commit SHAf3a7de0eeaa269465f8bb16a83392acb23ece80d(merge ref)

Refrefs/pull/247/merge

Timestamp2026-11-05 06:07:32 UTC

The record is egress-centric; processes without recorded egress do not appear.