dsh-release-guardian
A DeepSeek Harness release-risk scanning tool with deterministic Git-diff checks and explicitly authorized project checks.
Install
$ dsh plugin --profile headless add ./dsh-release-guardian-0.1.0.tgzPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Registers the `release_guardian_check` host tool in a DeepSeek Harness profile.
- Scans worktree, staged, or range-based Git changes.
- Applies deterministic rules to changed-file metadata and added lines, including credential, dependency, CI, and risky-code patterns.
- Produces human-readable and schema-versioned JSON reports.
- Discovers test, typecheck, and build commands for JavaScript, Python, Go, Rust, Java, and .NET repositories.
- Separates check discovery from execution and requires explicit approval to run project commands.
- Also provides a standalone CLI plus optional Codex and Claude Code adapters.
Useful For
- Review local changes before a release or commit.
- Surface credential exposure, risky CI changes, dependency changes, and potentially dangerous code additions.
- Generate machine-readable release-risk reports for local automation or CI workflows.
- Discover available project validation commands before explicitly approving their execution through DSH.
Who It Fits
- DeepSeek Harness users managing release reviews.
- Developers and maintainers of Git-based projects.
- Teams that want deterministic local change-risk signals before release validation.
Documented Limitations
- A `ready` verdict is a scoped risk signal, not proof that a release is safe.
- The scanner requires a local Git repository and Git available on `PATH`.
- Project checks run only after explicit authorization and are not sandboxed; they use the invoking user's permissions.
- Discovery does not verify that discovered tools or dependencies are installed.
- The DSH bundle is documented as tested against `@deepseek-ai/dsh` `0.1.0-rc.6`; the README advises rerunning packed-profile smoke tests when upgrading RC versions.
- The package does not provide a web UI.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 4 runtime, 9 development, 2 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- XiaoSong1223/dsh-release-guardian
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 4a262f9 · 2026-09-11
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 5
- Last commit
- 2026-08-17
- Last release
- 2026-08-15
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed safety and session audit.
View plugin →Compatibility bridge and host ABI enabling unmodified Pi plugins to run natively on DeepSeek Harness.
View plugin →Native SQLite-backed local project taskboard plugin and UI for DeepSeek Harness with Agent claim and review flows.
View plugin →Persistent multi-model Agent teams and bounded DAG workflows with GUI controls for DeepSeek Harness.
View plugin →