Security warning: connection to IPFS Network Detected

[pdonorio]

Hello there, we've been facing a new security alert in our systems recently.

A self hosted github runner is running a cypress workflow, and the security monitor
has triggered a Connection to IPFS Network Detected alert starting yesterday,
even though it hasn't so far.

An IPFS domain was seen in DNS traffic on ... by user under execution path ... using ..., DNS query data ipfs.io.arc-runners.svc.cluster.local

It seems that the fault is on

... connections to known IPFS gateways, which can be used for evading traditional content monitoring and censorship mechanisms. An attacker could leverage this to access and distribute illicit or sensitive content without detection, potentially violating regulatory requirements and compromising data security.

May you help us detect if it's a false positive?
If yes, why?