jupysec
JupyterLab Security Utilities
Security utilities for Jupyter environments. This set of rules and JupyerLab extension evaluates the security posture of the environment by comparing configuration values with best practices. Read more here.
Function
Run the extension to generate an HTML report of the security configuration of your Jupyter instance and other Jupyter instances on your host.
Configurations will be compared against these rules.
These rules currently evaluate:
- Whether there are any executables in your ipython startup directories
- What lines of your configuration are nonstandard with known malicious uses
- Whether your servers require tokens for authentication
- Whether your server and client are communicating over HTTPS
- Whether you are serving Jupyter to a broader domain than just localhost
- If silent commands have been run against your kernels
Some of these categories may have false-positives depending on your environment and use-case. However, users should monitor their environments and be aware of their security posture and any changes.
Matches against the rules are referred to as "Findings" and displayed in the Report Card.
Requirements
- JupyterLab >= 3.0
Getting Started
To install just the rules, install with:
pip install jupysec
Then in your python environment:
from jupysec.rules import Rules
Rules().get_findings()
Or to also install the JupyterLab extension:
pip install 'jupysec[jupyterlab]'
After starting jupyterlab, your launcher window should now have a "Security" section with a widget for generating your findings. This will launch and index page with a list of all findings, color-coded by category. Click into findings for more details.
1 maintainer
Metadata
1 maintainer
Release files for jupysec 0.1.17
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| jupysec-0.1.17-py3-none-any.whl | Python 3 | none | any | Details |
Release files / jupysec-0.1.17-py3-none-any.whl
| Download URL | jupysec-0.1.17-py3-none-any.whl |
|---|---|
| Size | 7.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
27332528edb835747e4c3a820326b62fcb60e1db8e67302dddb5510571e4797d
|
|
BLAKE2b-256 checksum How to use checksums |
1cd76dc4cf16520020a76f8669905382e4aca28d4f59bc358b82841839bdabbf
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.11.3
|
