artemiroshnichenko/dsh-plugins--packages-dsh-guard ↗★ 0
dsh-guard
Security guard for DeepSeek Harness: monotonic deny on secret paths and approval gates for destructive shell commands
AI 분석
提供敏感文件路径拦截和高危 Shell 命令(如 terraform apply)二次确认。适合对本地数据安全和系统稳定性有高要求的安全敏感型用户。
설치
검증된 bundle이 없거나 호환성 검사에 실패했습니다. 먼저 저장소 설명을 읽어 주세요. 전체 README 읽기 ↗
Configuration
Add the plugin to your ~/.dsh/cordis.patch.yml:
- insert:
- id: guard
name: dsh-guard
config:
# Additional path patterns to restrict
denyPaths:
- "~/company-secrets/**"
- "**/.vault-token"
# Additional commands requiring user confirmation
askCommands:
- id: terraform-apply
re: "\\bterraform\\s+apply\\b"
reason: "infrastructure deployment via terraform apply"
# Output warnings on intercepted actions
logDecisions: true