dsh-git-credentials
Keeps Git forge tokens out of model context with AES-256-GCM encrypted storage and web configuration.
Install
$ dsh plugin --profile <name> add ./dsh-git-credentials-0.4.0.tgzPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Stores forge API tokens encrypted at rest via AES-256-GCM with separate key file and 0600 permissions
- Prevents credential leakage by resolving tokens on demand directly into outgoing HTTP request headers
- Exposes 24 provider-scoped resource tools covering repositories, files, issues, merge/pull requests, and releases
- Supports GitHub, GitLab, Gitee, Gitea, and Bitbucket, including self-hosted GitLab and Gitea instances
- Provides a web management interface under Settings for adding, editing, and deleting sites and token references
- Enables hot reloading of configurations and encrypted snapshots without requiring runtime restarts
Useful For
- Interacting with Git repositories and managing PRs/MRs through DeepSeek Harness without exposing raw API keys to LLMs
- Managing automation workflows across multi-forge codebases or internal self-hosted GitLab/Gitea instances
- Rotating or configuring Git forge tokens on the fly through an in-app settings UI
Who It Fits
- Developers automating Git forge tasks using DeepSeek Harness
- Teams operating self-hosted GitLab or Gitea alongside hosted services like GitHub or Gitee
- Security-conscious practitioners seeking to avoid API token exposure in LLM contexts
Documented Limitations
- Does not protect against same-UID processes reading the key and data files simultaneously from ~/.dsh
- Bitbucket lacks a releases API, so release tools are unavailable for Bitbucket
- Installing bundle packages via CLI requires restarting the GUI to mount bundle layers, though configuration edits hot-apply
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 3 development, 3 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- revive/dsh-git-credentials
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 454adab · 2026-10-23
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 3GitHub stars
- Forks
- 1
- Open issues
- 0
- Last commit
- 2026-10-22
- Last release
- 2026-10-22
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Agent-native multi-market trading terminal and quantitative research plugin bundle for DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →