Skip to content

build(deps): bump uv from 0.6.17 to 0.9.30 in /__tests__/fixtures/uv-in-requirements-txt-project #40

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
+1 −1

build(deps): bump uv

4833fae
Select commit
Loading
Failed to load commit list.
Closed

build(deps): bump uv from 0.6.17 to 0.9.30 in /__tests__/fixtures/uv-in-requirements-txt-project #40

build(deps): bump uv
4833fae
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner failed Feb 5, 2026 in 14m 53s

⚠️ Unexpected network calls from CI/CD runners

Harden-Runner has generated new alerts for GitHub Actions workflow runs in this pull request. These findings may indicate malicious activities or misconfigurations, so prompt analysis is recommended.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

✅ Click here to approve this check run

The following anomalous outbound network calls were detected.

Endpoint Workflow Workflow Run Insights status
github.com:443 guarddog.yml Insights URL ⚠️ Anomalous
pypi.org:443 guarddog.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 guarddog.yml Insights URL ⚠️ Anomalous
semgrep.dev:443 guarddog.yml Insights URL ⚠️ Anomalous
registry.npmjs.org:443 guarddog.yml Insights URL ⚠️ Anomalous
whois.iana.org:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.verisign-grs.com:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.markmonitor.com:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.tucows.com:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.denic.de:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.nic.uk:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.gandi.net:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.comlaude.com:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.tcinet.ru:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.nic.ch:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.jprs.jp:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.nic.fr:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.registry.co:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.name.com:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.registrar.amazon:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.nic.io:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.godaddy.com:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.publicinterestregistry.org:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.cloudflare.com:43 guarddog.yml Insights URL ⚠️ Anomalous
whois.nic.google:443 guarddog.yml Insights URL ⚠️ Anomalous
github.com:443 claude_review.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
registry.npmjs.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
raw.githubusercontent.com:443 test.yml Insights URL ⚠️ Anomalous
release.pyx.dev:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
api.nektosact.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous
github.com:443 test.yml Insights URL ⚠️ Anomalous
pypi.org:443 test.yml Insights URL ⚠️ Anomalous
files.pythonhosted.org:443 test.yml Insights URL ⚠️ Anomalous

🔎 Potential next steps

Anomalous Network Call

To investigate and triage the detection, please follow the runbook at https://docs.stepsecurity.io/harden-runner/runbooks/anomalous-outbound-network-calls

📋 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
claude_review.yml 21699350509 1 4 View Insights
auto_cherry_pick.yml 21699350356 - - Harden-Runner not enabled
claude_review.yml 21699350398 1 4 View Insights
claude_review.yml 21699350281 1 4 View Insights
guarddog.yml 21699350325 25 3 View Insights
codeql.yml 21699350208 2 3 View Insights
auto_cherry_pick.yml 21699350409 - - Harden-Runner not enabled
auto_cherry_pick.yml 21699350245 - - Harden-Runner not enabled
auto_cherry_pick.yml 21699350282 - - Harden-Runner not enabled
claude_review.yml 21699350321 1 4 View Insights
dependency-review.yml 21699350197 3 3 View Insights
claude_review.yml 21699350240 1 4 View Insights
test.yml 21699350195 12 4 View Insights
auto_cherry_pick.yml 21699350495 - - Harden-Runner not enabled

📚 Learn More

You can learn more about this GitHub check here

View more details on StepSecurity Actions Security