github · jupyter-mcp-serverHEAD

Evidence

# Copyright (c) 2024- Datalayer, Inc.

#

# BSD 3-Clause License

"""

Tornado request handlers for the Jupyter MCP Server extension.

This module provides handlers that bridge between Tornado (Jupyter Server) and

FastMCP, managing the MCP protocol lifecycle and request proxying.

"""

import json

import logging

from typing import Any

from jupyter_server.base.handlers import JupyterHandler

from jupyter_mcp_server.jupyter_extension.context import get_server_context

from jupyter_mcp_server.server_con

Remediation

Apply auth middleware at the route or router level: - Express / Fastify / Koa: `passport.authenticate(...)`, `requireAuth`, `verifyToken`, or an equivalent JWT middleware applied via `router.use(authMw)` or as a per-route handler. - FastAPI: `Depends(get_current_user)`, `OAuth2PasswordBearer`, `HTTPBearer`, or `verify_jwt` dependency. - Flask: `@login_required`, `@auth_required`, `@jwt_required`, or call `verify_jwt_in_request()` in the handler. Mounting MCP behind a s

Evidence

if transport == "stdio":

        mcp.run(transport="stdio")

    elif transport == "streamable-http":

        uvicorn.run(mcp.streamable_http_app, host="0.0.0.0", port=port)  # noqa: S104

    else:

        raise Exception("Transport should be `stdio` or `streamable-http`.")

Remediation

Bind to 127.0.0.1 for local-only access. If cross-host access is truly required, put the service behind an authenticated reverse proxy rather than exposing it on 0.0.0.0.

Evidence

```dockerfile

# Dockerfile for single-user image

FROM jupyter/minimal-notebook:latest

RUN pip install "jupyter-mcp-server>=0.15.0" \

                "jupyterlab==4.4.1" \

Remediation

Pin the base image by digest (e.g. python@sha256:...) or at minimum an exact semver tag (e.g. python:3.12.4-slim-bookworm). Never use :latest in production Dockerfiles.

Evidence

except Exception as e:

        logger.error(f"Error executing cell locally: {e}")

        return [f"[ERROR: {str(e)}]"]

async def get_jupyter_ydoc(serverapp: Any, file_id: str):

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

return JSONResponse({"success": True})

    except Exception as e:

        logger.error(f"Failed to connect: {e}")

        return JSONResponse({"success": False, "error": str(e)}, status_code=500)

@mcp.custom_route("/api/stop", ["DELETE"])

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

except Exception as e:

        logger.error(f"Error executing code locally: {e}")

        return [f"[ERROR: {str(e)}]"]

async def execute_cell_local(

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

return format_TSV(headers, rows)

        except Exception as e:

            return f"Error formatting kernel list: {str(e)}"

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

return JSONResponse({"success": True})

    except Exception as e:

        logger.error(f"Error stopping notebook: {e}")

        return JSONResponse({"success": False, "error": str(e)}, status_code=500)

@mcp.custom_route("/api/healthz", ["GET"])

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

code=code, kernel_id=kid, metadata={},

                outputs=[], error=e, context=hook_ctx,

            )

            return [f"[ERROR: {str(e)}]"]

    async def execute(

        self,

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

except Exception as e:

        logger.error(f"Error executing via ExecutionStack: {e}", exc_info=True)

        return [f"[ERROR: {str(e)}]"]

async def execute_code_local(

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

async def _list_files_local(

    contents_manager: Any,

    path: str = "",

    max_depth: int = 1,

    current_depth: int = 0

) -> List[Dict[str, Any]]:

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

kernel_spec_manager=None,

        notebook_manager=None,

        # Tool-specific parameters

        code: str = None,

        timeout: int = 60,

        kernel_id: str = None,

        ensure_kernel_alive_fn=None,

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

class NotebookContentResponse(BaseModel):

    """Response containing notebook content"""

    path: str = Field(..., description="Notebook path")

    cells: list[dict[str, Any]] = Field(..., description="List of cells")

    metadata: dict[str, Any] = Field(default_factory=dict, description="Notebook metadata")

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

# Notebook operation models

class NotebookContentRequest(BaseModel):

    """Request to retrieve notebook content"""

    path: str = Field(..., description="Path to the notebook file")

    include_outputs: bool = Field(True, description="Include cell outputs")

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

kernel_spec_manager: Optional[Any] = None,

        notebook_manager: Optional[Any] = None,

        # Tool-specific parameters

        path: str = "",

        max_depth: int = 1,

        start_index: int = 0,

        limit: int = 25,

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

# Copyright (c) 2024- Datalayer, Inc.

#

# BSD 3-Clause License

FROM python:3.12-slim

WORKDIR /app

COPY pyproject.toml LICENSE README.md ./

COPY jupyter_mcp_server/ jupyter_mcp_server/

COPY jupyter-config/ jupyter-config/

ENV PIP_NO_CACHE_DIR=1 \

    PIP_DEFAULT_TIMEOUT=120 \

    PIP_DISABLE_PIP_VERSION_CHECK=1

RUN python -m pip install --upgrade pip wheel setuptools && pip --version

RUN pip install --no-cache-dir -e . && \

    pip uninstall -y pycrdt datalayer_pycrdt && \

    pip install --

Remediation

Create and switch to a non-root user before the CMD / ENTRYPOINT: RUN adduser --system --uid 1000 app USER 1000 Or reuse the base image's shipped non-root account (e.g. `USER nobody`, `USER nonroot` on distroless). Multi-stage builds only need the USER directive in the final stage.

Evidence

path: dist

      - name: Publish to PyPI

        uses: pypa/gh-action-pypi-publish@release/v1

        with:

          # No password needed, using OIDC trusted publishing

          skip-existing: true

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

steps:

      - name: Checkout

        uses: actions/checkout@v6

      - name: Set up Python ${{ matrix.python-version }}

        uses: actions/setup-python@v6

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

#   steps:

  #     - uses: actions/checkout@v6

  #     - uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1

  #     - uses: jupyterlab/maintainer-tools/.github/actions/check-links@v1

  test_lint:

    runs-on: ubuntu-latest

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

name: Build Python Package

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v6

      - name: Set up Python

        uses: actions/setup-python@v6

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

uses: docker/setup-buildx-action@v4

      - name: Log in to Docker Hub

        uses: docker/login-action@v4

        with:

          username: ${{ secrets.DOCKERHUB_USERNAME }}

          password: ${{ secrets.DOCKERHUB_TOKEN }}

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

with:

          python-version: ${{ matrix.python-version }}

          architecture: "x64"

      - uses: actions/download-artifact@v8

        with:

          name: jupyter_mcp_server-sdist-${{ matrix.python-version }}

      - name: Install and Test

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push Docker image

        uses: docker/build-push-action@v7

        with:

          context: .

          platforms: linux/amd64,linux/arm64

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

- uses: actions/checkout@v6

      - name: Set up Python

        uses: actions/setup-python@v6

        with:

          python-version: '3.10'

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

steps:

      - name: Checkout

        uses: actions/checkout@v6

      - name: Set up Python ${{ matrix.python-version }}

        uses: actions/setup-python@v6

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

permissions:

      contents: write

    steps:

      - uses: actions/checkout@v6

        with:

          fetch-depth: 0  # Fetch complete history for release creation

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

python-version: ${{ matrix.python-version }}

      - name: Base Setup

        uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1

      - name: Install the extension

        run: |

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

steps:

      - name: Checkout

        uses: actions/checkout@v6

      - name: Install Python

        uses: actions/setup-python@v6

        with:

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

platforms: arm64

      - name: Set up Docker Buildx

        uses: docker/setup-buildx-action@v4

      - name: Log in to Docker Hub

        uses: docker/login-action@v4

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT

      - name: Set up QEMU

        uses: docker/setup-qemu-action@v4

        with:

          platforms: arm64

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

test_lint:

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v6

      - uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1

      - name: Run Linters

        run: |

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

steps:

      - name: Checkout

        uses: actions/checkout@v6

        with:

          token: ${{ secrets.GITHUB_TOKEN }}

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

id-token: write  # Required for OIDC

    steps:

      - name: Download artifacts

        uses: actions/download-artifact@v8

        with:

          name: python-package

          path: dist

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

#   runs-on: ubuntu-latest

  #   steps:

  #     - uses: actions/checkout@v6

  #     - uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1

  #     - uses: jupyterlab/maintainer-tools/.github/actions/check-links@v1

  test_lint:

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

run: python -m build

      - name: Upload artifacts

        uses: actions/upload-artifact@v7

        with:

          name: python-package

          path: dist/*

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

- name: Checkout

        uses: actions/checkout@v6

      - name: Install Python

        uses: actions/setup-python@v6

        with:

          python-version: ${{ matrix.python-version }}

          architecture: "x64"

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

# check_links:

  #   runs-on: ubuntu-latest

  #   steps:

  #     - uses: actions/checkout@v6

  #     - uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1

  #     - uses: jupyterlab/maintainer-tools/.github/actions/check-links@v1

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

pip uninstall -y "jupyter_mcp_server"

          rm -rf "jupyter_mcp_server"

      - uses: actions/upload-artifact@v7

        if: startsWith(matrix.os, 'ubuntu')

        with:

          name: jupyter_mcp_server-sdist-${{ matrix.python-version }}

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

packages: write  # For GHCR

      id-token: write  # For Docker Hub OIDC (optional)

    steps:

      - uses: actions/checkout@v6

      - name: Extract version from tag

        id: version

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v6

      - uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1

      - name: Run Linters

        run: |

          bash ./.github/workflows/lint.sh

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

uses: actions/checkout@v6

      - name: Set up Python ${{ matrix.python-version }}

        uses: actions/setup-python@v6

        with:

          python-version: ${{ matrix.python-version }}

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

uses: actions/checkout@v6

      - name: Set up Python ${{ matrix.python-version }}

        uses: actions/setup-python@v6

        with:

          python-version: ${{ matrix.python-version }}

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

)

        # Add CORS middleware

        app.add_middleware(

            CORSMiddleware,

            allow_origins=["*"],  # In production, should set specific domains

            allow_credentials=True,

            allow_methods=["*"],

            allow_headers=["*"],

        )

Remediation

Replace wildcard / reflected origin with an explicit allowlist of trusted origins: cors({ origin: ["https://app.example.com", "https://admin.example.com"], credentials: true, }) Or, if the API genuinely should be accessible from any origin, drop credentials and use bearer tokens in the `Authorization` header instead — that combo is browser-safe.

Evidence

# Get final result

    try:

        await execution_future

    except asyncio.CancelledError:

        pass

    return None

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

code=cell_source, kernel_id=kid, metadata={},

                                outputs=partial_outputs, error=e, context=hook_ctx,

                            )

                            return partial_outputs

                        except Exception:

                            pass

                        timeout_result = [f"[TIMEOUT ERROR: Cell execution exceeded {timeout_seconds} seconds and was interrupted]"]

                        await hooks.fire(

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

try:

            yroom = await ywebsocket_server.get_room(room_id)

            if yroom and hasattr(yroom, '_document'):

                return yroom._document

        except Exception:

            pass

    except Exception:

        # YDoc not available, will fall back to file operations

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

execution_future.cancel()

            try:

                if hasattr(kernel, 'interrupt'):

                    kernel.interrupt()

            except Exception:

                pass

            raise asyncio.TimeoutError(f"Cell execution timed out after {timeout_seconds} seconds")

        # Check for new outputs and try to trigger sync

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

try:

                    from datetime import datetime

                    dt = datetime.fromisoformat(last_modified.replace('Z', '+00:00'))

                    last_modified = dt.strftime("%Y-%m-%d %H:%M:%S")

                except Exception:

                    pass

            file_info = {

                'path': item_path,

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

outputs_log.append(f"[TIMEOUT at {elapsed:.1f}s: Cancelling execution]")

                            try:

                                kernel.interrupt()

                                outputs_log.append("[Sent interrupt signal to kernel]")

                            except Exception:

                                pass

                            break

                        # Check for new outputs

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.