Add opentelemetry requests hook to trace HTTP headers

[vprivat-ads]

Optionally trace HTTP headers from requests/responses in OpenTelemetry.

Disabled by default (security), to enable it, define OTEL_PYTHON_REQUESTS_TRACE_HEADERS environment variable.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[jgaucher-cs]

@vprivat-ads do we need the same in rs-client-libraries ? Else I'm OK with this PR.

[nleconte-csgroup]

Is it only intended for local mode or should it be also applicable for the server mode (K8S) ? If so, we should modify the helm charts and the values in the infrastructure.

[vprivat-ads]

@vprivat-ads do we need the same in rs-client-libraries ? Else I'm OK with this PR.

@jgaucher-cs no, I don't see a need on client side for now. It's very easy to update the code locally if needed, without having resort to OpenTelemetry. This change is useful in cluster mode to avoid having to build a new docker image.

[github-actions]

SonarQube Quality Gate Result

• Result: ✅ OK
• Branch: 795/merge
• Triggered by @vprivat-ads on pull_request

Metric	Status	Value	Error Threshold
New reliability rating	✅ OK	1	> 1
New security rating	✅ OK	1	> 1
New maintainability rating	✅ OK	1	> 1

View on SonarQube

updated: 1/3/2025, 15:07:57 (UTC+0)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud