Yeah, if you check the repo it's running the code in a specialized docker container with no network access.