Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Dynatrace provides a powerful SDK that can be used to achieve code level visibility and transaction tracing for applications written in multiple languages, including python. This project provides a library called autodynatrace, which is a wrapper around the OneAgent SDK for Python and allows you to instrument python applications with minimal code changes.
Warning Autodynatrace is opensource and supported via github issues, this is not supported by Dynatrace via support tickets.
pip install autodynatrace
Add the environment variable AUTOWRAPT_BOOTSTRAP=autodynatrace
to your python processes
For most technologies, just import it in your code.
import autodynatrace
For Django, add "autodynatrace.wrappers.django"
to INSTALLED_APPS
AUTODYNATRACE_CAPTURE_HEADERS
: Default: False
, set to True
to capture request headersAUTODYNATRACE_LOG_LEVEL
: Default WARNING
AUTODYNATRACE_FORKABLE
: Default False
, set to True
to instrument forked processes. Use this for gunicorn/uwsgiAUTODYNATRACE_VIRTUAL_HOST
: Overwrite the default Virtual Host for web frameworksAUTODYNATRACE_APPLICATION_ID
: Overwrite the default Application Name for web frameworksAUTODYNATRACE_CONTEXT_ROOT
: Overwrite the default Context Root for web frameworksAUTODYNATRACE_CUSTOM_SERVICE_NAME
: Overwrite the custom service name (used by @autodynatrace.trace
)AUTODYNATRACE_CUSTOM_SERVICE_USE_FQN
: Default False
, set to True
to use fully qualified names for service and method names in custom traced servicesAUTODYNATRACE_INSTRUMENT_<LIB_NAME>
: If set to False
, Disables the instrumentation for a specific lib, example: AUTODYNATRACE_INSTRUMENT_CONCURRENT=False
, default is True
For support using this open source project, please open a github issue explaining your issue and providing code examples, environment details
FAQs
Auto instrumentation for the OneAgent SDK
We found that autodynatrace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.