dsh-code-security
Local static security analysis and Git diff auditing plugin for DeepSeek Harness with remediation tracking.
Install
$ dsh plugin --profile desktop add dsh-code-securityPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Scan files, directories, or Git diffs to detect security issues with location markers and code evidence
- Track remediation progress and review resolution status directly within DeepSeek Harness
- Provide a dedicated DSH workbench UI accessible from the native sidebar and settings view
- Redact detected secrets and credentials before display, storage, or export
- Support optional integrations with Betterleaks secret detection, Semgrep CE dataflow rules, and OSV dependency auditing
- Export scan findings to Markdown and SARIF formats and maintain issue baselines
Useful For
- Reviewing Git pull requests and staged changes for vulnerabilities before committing code
- Running local static security reviews without sending proprietary source code to external cloud analyzers
- Auditing repository dependencies and tracking remediation of discovered security flaws over time
Who It Fits
- Software engineers using DeepSeek Harness for code reviews and development
- Security-conscious developers and code reviewers looking for local SAST within DSH
- DevSecOps practitioners seeking SARIF and baseline tracking for workspace changes
Documented Limitations
- Runs built-in local rules by default; enhanced scanning features require user-installed external tools like Semgrep CE or Betterleaks
- Online dependency auditing requires explicit opt-in and network access
- Requires Node.js runtime matching package engine requirements (Node ^22.19.0 or >=24.0.0)
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 5 runtime, 5 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- STARDUSTLC666/dsh-code-security
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 6b3a9f1 · 2026-10-26
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 2GitHub stars
- Forks
- 0
- Open issues
- 1
- Last commit
- 2026-10-25
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Pre-execution safety net blocking destructive shell commands and secret leaks in coding agents.
View plugin →Free and multi-engine web search provider for DeepSeek Harness with automatic fallback and web settings UI.
View plugin →Security red-teaming and prompt rule management plugin for DeepSeek Harness web and desktop profiles.
View plugin →DeepSeek Harness web-search plugin that adds web search, X search, and focused page fetching with structured evidence.
View plugin →