Articles tagged "Supply chain security"

dsh-provenance：在 DeepSeek Harness 插件安装前做来源校验

2026-09-04 27 views DeepSeek Harness plugin DeepSeek Harness DSH plugin dsh-provenance Supply chain security 来源校验

dsh-provenance 是由 Darren Tang 开发的一个 DSH 插件，旨在解决智能体插件安装过程中的供应链安全风险。它通过在代码运行前检查待安装压缩包与已读源码的一致性，提前发现潜在问题并给出 ok、review 或 block 的判定。该工具支持检查来源固定性、注册表完整性、安装钩子、SLSA 构建来源及制品与源码比对。它提供 CLI 和 DSH 工具两种使用方式，支持 CI 集成，并具备安装拦截功能，防止未经审计的插件被安装。需要注意的是，dsh-provenance 专注于来源验证，不执行被审计包，不验证 Sigstore 签名，也不进行代码行为扫描或运行时监控。其干净报

Eligahyu/dsh-sentinel-scanner: Read-Only Security Scanning for DSH Plugins

2026-08-30 61 views DeepSeek Harness plugin DeepSeek dsh plugin security scanning Sentinel Supply chain security

Eligahyu/dsh-sentinel-scanner is a read-only static security scanning tool for DeepSeek Harness (DSH) plugins, designed to perform supply chain and security risk assessment before code execution. The tool detects risks such as command execution, credential access, data exfiltration, and obfuscation through 51 AST-based heuristic rules, outputting a risk score from 0 to 100 along with a security verdict, but never executes the scanned code. It offers multiple integration methods: as a DSH Agent Tool plugin, a standalone CLI (`dsh-sentinel`), a GitHub Action, or a JavaScript API. Core features include three scanning modes—source code, package artifacts, and profiles—with support for pre-publishing npm packages.

dsh-plugin-healthcheck: Install Plugin, Verify First, Then Go Live

2026-08-26 105 views DeepSeek Harness plugin DeepSeek DSH admin-security Plugin Detection Supply chain security

dsh-plugin-healthcheck is a DSH plugin health check tool maintained by chenw2759-wq, categorized under admin-security. It provides a "Plugin Inspection" feature in the web settings panel, integrating L0 static checks (file integrity, dependency declarations, high-risk duplicates, cordis usage, etc.), L1 configuration combinations, L2 isolated trial runs (complete boot of child processes without restarting the backend), and C8 pure static trojan scanning. When issues are detected, it supports one-click fixes, automatic rollback (writing home patch to disable lines, HMR hot-reload), or copying predefined prompts for agent use. The ironclad rule for fixes restricts modifications to plugin code and configuration layers only, strictly prohibiting changes to harness source code. Licensed under MIT, with 14 stars on GitHub.