What is corepack reaching out to?

[xenoterracide]

This is obviously a "our corportate network" issue, but maybe someone here can help. I'm certain this is one of those certificate hell issues we have with our proxy... but my normal hacks aren't working.

❯ yarn
Internal Error: Error when performing the request
    at ClientRequest.<anonymous> (/Users/nqy642/.asdf/installs/nodejs/16.14.2/lib/node_modules/corepack/dist/corepack.js:3937:20)
    at ClientRequest.emit (node:events:526:28)
    at TLSSocket.socketErrorListener (node:_http_client:442:9)
    at TLSSocket.emit (node:events:526:28)
    at emitErrorNT (node:internal/streams/destroy:157:8)
    at emitErrorCloseNT (node:internal/streams/destroy:122:3)
    at processTicksAndRejections (node:internal/process/task_queues:83:21)

normal hacks, setting YARN_HTTPS_PROXY and HTTP_PROXY etc, to our corporate proxy. Also adding our "man in the middle cert" via export NODE_EXTRA_CA_CERTS=~/.certs/company.crt. npm and github urls work, what's this reaching out to?