dsh-security-assurance
Policy-driven repository security assurance and supply-chain auditing plugin for DeepSeek Harness.
Install
$ dsh plugin --profile web add https://github.com/bailong-Hakuryu/dsh-security-assurance/releases/download/v0.1.0-rc.17/dsh-security-assurance-0.1.0-rc.17.tgzPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Run policy-driven security assessments on frozen Git revisions, snapshots, or change sets
- Inspect package.json install lifecycle scripts and npm publish surfaces
- Verify pnpm lockfile integrity and GitHub Actions supply chain permissions/SHA pins
- Normalize and independently validate frozen npm-audit and Gitleaks reports
- Provide eight model-callable security tools and /security slash command routing
- Deliver an interactive Security Assurance Workbench and security card UI for Harness Web
Useful For
- Auditing repository dependency lifecycle and CI supply chain security in DeepSeek Harness
- Verifying npm packaging allowlists and pnpm lockfile consistency prior to release
- Validating GitHub Actions workflow permissions and pinned commit SHAs
- Integrating external secret-scanning and dependency vulnerability reports into auditable verdicts
Who It Fits
- Security engineers and architects establishing automated repository assurance
- Developers and release managers verifying package integrity in DeepSeek Harness workflows
Documented Limitations
- Only the security/standard profile is currently qualified; deep and custom profiles fail closed
- Does not perform live network scanning or active vulnerability probing inside the pure analysis boundary
- External reports such as npm-audit and Gitleaks must be pre-generated and included in the frozen subject
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 3 runtime, 28 development, 14 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- bailong-Hakuryu/dsh-security-assurance
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 21286d6 · 2026-09-29
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-29
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Pre-execution safety net blocking destructive shell commands and secret leaks in coding agents.
View plugin →Native SQLite-backed task management and project board bundle with Web UI and Agent workflow tools for DeepSeek Harness.
View plugin →Agent skill for DeepSeek Harness that turns ideas, plans, and codebases into interactive architecture diagrams.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →