Introduction¶

The core philosophy of DeepSeek Harness is “everything is a plugin.” When using Agents to assist engineering and development, developers need to interact with GitHub frequently, such as creating PRs, diagnosing CI failures, or managing secrets. Traditional approaches often rely on manual web-based operations or configuring plaintext tokens, which are not only inefficient but also pose security risks.

dsh-github-flow is a plugin maintained by ItQianChen. It gives DeepSeek Harness Agents native GitHub operation capabilities, securely reusing the host machine’s gh CLI login credentials to implement PR/Issue/Actions workflow governance, secret management, and a full-view workbench, creating an immersive GitHub working environment for human-machine collaboration.

Installation and Prerequisites¶

This plugin relies on GitHub CLI (gh) for authentication. It must be installed and logged in on the host machine first.

1. Prerequisites
   Install GitHub CLI and log in:

    # macOS
    brew install gh
    gh auth login

    # Windows (PowerShell)
    winget install --id GitHub.cli
    gh auth login

2. Install the Plugin
   In the DSH terminal, choose the corresponding command based on your environment:

    # DSH Desktop
    dsh plugin --profile desktop add dsh-github-flow

    # DSH Web / CLI environment
    dsh plugin --profile web add dsh-github-flow

DSH's built-in package manager enables a supply chain security policy by default. Within 24 hours after a new version is released, a bare-name install automatically falls back to the previous stable version. To install the new version immediately, explicitly specify the version number (for example, `dsh-github-flow@0.3.0`).

Core Capabilities¶

This plugin aggregates nine major domains of core tools, covering PR/Issue/Actions workflow governance and secret/variable management. It also includes token overflow protection (intelligent binary truncation with a default limit of 24KB) and a secondary confirmation mechanism for high-risk operations.

Full PR Lifecycle Management¶

Agents can create, review, merge, update branches, and check conflicts for PRs.
* Operations: Supports listing PRs, viewing details, retrieving code diffs, checking CI gates, creating PRs, merging (supports squash/merge/rebase), unmerging, and more.
* Features: Supports switching between Draft ↔ Ready, creating reverse commits, and downloading PR discussion screenshots.

CI Pipeline Troubleshooting and Repair¶

Used to identify the causes of CI build failures and assist with fixes.
* Operations: Supports viewing CI run history, precisely extracting failed step logs, retriggering workflows, viewing workflow lists and details, and downloading build artifacts.
* Features: Provides core tools such as log_failed to help Agents quickly diagnose and locate problematic code.

Defect Tracking and Task Closure¶

Manages the full lifecycle of Issues.
* Operations: Supports multi-condition Issue search, creating and editing Issues, assigning and locking Issues, commenting, closing, physical deletion, cross-repository migration, and creating development branches from an Issue with one action.
* Features: Supports pinning, viewing by assignee, and segmented viewing by mention status.

Repository Exploration and Cross-Repository Search¶

Explore repositories without cloning them.
* Operations: Supports viewing repository metadata, reading the README, and searching code/repositories/Issues/PRs across repositories or site-wide.
* Features: Provides the ability to read any file and list directories without cloning, improving search efficiency.

Low-Level API and Release Management¶

• GitHub API: Provides low-level REST/GraphQL invocation capabilities, supporting --jq filtering and automatic pagination.
• Version Release: Supports viewing and creating releases, uploading/downloading build assets to/from Releases, and automatically generating release notes based on commit history.

CI/CD Secret and Variable Management¶

Securely manages repository Secrets and Actions variables.
* Operations: Supports viewing secret/variable lists, setting/updating secret values, and deleting secrets.
* Features: Secret values are passed through a subprocess standard input stream and are never exposed in command-line arguments; repository, organization, and environment scopes are supported.

Web UI Full-View Workbench¶

Built-in immersive workbench provides a full view of PR gates, CI pipelines, and the Issue matrix, eliminating the need to switch between multiple applications.

Typical Usage¶

The above capabilities can be invoked with natural language instructions:
* PR interaction: "Help me check whether the current repository has PRs that need my review?"
* CI repair: "Why did the most recent Actions workflow fail? Extract the failed step logs and help me fix it"
* Issue management: "File an Issue for the Bug I just reproduced, and add the 'bug' and 'backend' labels"
* Code search: "Search the current repository for code lines that use 'createPrTool'"
* Version release: "Release v0.2.0 for the current repository and automatically generate release notes based on the commit history"
* Secret update: "Help me update the new NPM_TOKEN to the Secrets of the current repository"

Notes¶

1. Prerequisites: GitHub CLI (gh) must be installed and logged in beforehand.
2. Platform support: Supports macOS, Windows, and Linux platforms.
3. Security mechanisms: High-risk operations (such as deletion, merging, and setting secrets) require secondary confirmation; token overflow protection is enabled by default.
4. Compatibility: Compatible with the Cordis framework.

Summary¶

dsh-github-flow solves the pain points Agents encounter in GitHub workflows: “can see it, can’t get in, can’t modify it.” By reusing the secure credentials of the gh CLI, it provides a complete toolchain from code review to CI repair and from Issue management to secret maintenance, helping developers build an efficient, immersive GitHub workbench.

For more information, see: GitHub Repository