StepSecurity Logo
StepSecurity
  • Get Started

  • Overview

  • Workflow Runs

    Baseline

    Detections

    Suppression Rules

    Policy Store

    Self Hosted Runners

  • Action Secrets

  • Settings

  1. compromised-packages
  2. Shai Hulud The Second Coming

Jobs

  • execute-bundle

execute-bundle

Harden-runner policy:
audit
Start time:24 Nov 2025 12:11:54 GMTRunner name:-Duration:1m 39sJob labels:ubuntu-latestBaseline status:Creating
Show findings only
StepPIDProcessDestinationPortStatus
Checkout repositoryactions/checkout@v4
2252git-remote-httpGitHubgithub.comAPI Calls1443Allowed24 Nov 2025 12:12:03
Configure GitHub CLI and Git with PAT
2269ghGitHubapi.github.com443Allowed24 Nov 2025 12:12:06
Configure GitHub CLI and Git with PAT
2313git-remote-httpGitHubgithub.comAPI Calls1443Allowed24 Nov 2025 12:12:08
Extract and execute atrix package
2377curlbun.shAPI Calls1443Allowed24 Nov 2025 12:12:11
Extract and execute atrix package
2385curlGitHubgithub.comAPI Calls1443Allowed24 Nov 2025 12:12:12
Extract and execute atrix package
2385curlGitHubrelease-assets.githubusercontent.comAPI Calls1443Allowed24 Nov 2025 12:12:12
Extract and execute atrix package
2403bunGitHubapi.github.com443Allowed24 Nov 2025 12:12:14
Extract and execute atrix package
2403bunGitHubgithub.com443Allowed24 Nov 2025 12:12:30
Extract and execute atrix package
2403bunGitHubrelease-assets.githubusercontent.com443Allowed24 Nov 2025 12:12:30
Extract and execute atrix package
2469Runner.ListenerGitHubapi.github.comAPI Calls1443
Anomalous
24 Nov 2025 12:12:28
Extract and execute atrix package
2523trufflehogoss.trufflehog.org443Allowed24 Nov 2025 12:12:32
Extract and execute atrix package
2533trufflehogapi.box.com443Allowed24 Nov 2025 12:12:34
Extract and execute atrix package
2533trufflehogGitHubapi.github.com443Allowed24 Nov 2025 12:12:34
Extract and execute atrix package
2533trufflehogapi.cloudflare.com443Allowed24 Nov 2025 12:12:34
Extract and execute atrix package
2533trufflehogapi.aiven.io443Allowed24 Nov 2025 12:12:37
Extract and execute atrix package
2533trufflehogapi.tomorrow.io443Allowed24 Nov 2025 12:12:37
Extract and execute atrix package
2533trufflehogGitLabgitlab.com443Allowed24 Nov 2025 12:12:55
Extract and execute atrix package
2533trufflehogGitHubgithub.com443Allowed24 Nov 2025 12:12:55
Extract and execute atrix package
2533trufflehogapi.travis-ci.com443Allowed24 Nov 2025 12:12:56
Extract and execute atrix package
2520python3.13GitHubraw.githubusercontent.com443Allowed24 Nov 2025 12:12:33
Extract and execute atrix package
2570python3.13dc.services.visualstudio.com443Allowed24 Nov 2025 12:12:47
Extract and execute atrix package
2533/home/runner/.truffler-cache/trufflehogapi.unify.id443Allowed24 Nov 2025 12:13:25
Extract and execute atrix package
2469.NET TP Workerapi.github.comAPI Calls1443
Anomalous
24 Nov 2025 12:12:28
Showing 23 of 23 row(s)

Rows per page

Page 1 of 1