Skip to content

GL_ManagedBy.md

Latest commit

 

History

History
22 lines (15 loc) · 1.02 KB

GL_ManagedBy.md

File metadata and controls

22 lines (15 loc) · 1.02 KB

GL_ManagedBy

Edge Schema

General Information

The non-traversable GL_ManagedBy edge connects a runner instance to the gitlab-runner manager process that operates it. Multiple runner instances can be managed by the same manager process. This edge is created during runner enumeration when manager details are available.

While not directly traversable, GL_ManagedBy is essential for host-level lateral movement analysis: by following GL_BuildsOn → GL_Runner → GL_ManagedBy → GL_RunnerManager → GL_HostedOn → Computer, an attacker can identify which physical or virtual hosts are reachable by executing code in a given pipeline branch.

graph LR
    runner("fa:fa-gears GL_Runner shared-runner-01")
    manager("fa:fa-server GL_RunnerManager linux-runner-host")
    computer("fa:fa-desktop Computer runner-host-01")

    runner -.->|GL_ManagedBy| manager
    manager -.->|GL_HostedOn| computer
Loading