artemiroshnichenko/dsh-plugins--packages-dsh-guard0

dsh-guard

Security guard for DeepSeek Harness: monotonic deny on secret paths and approval gates for destructive shell commands

AI 분석

提供敏感文件路径拦截和高危 Shell 命令(如 terraform apply)二次确认。适合对本地数据安全和系统稳定性有高要求的安全敏感型用户。

패키지
dsh-guard
버전
0.1.0
라이선스
MIT
최근 업데이트
2026. 9. 9.

설치

검증된 bundle이 없거나 호환성 검사에 실패했습니다. 먼저 저장소 설명을 읽어 주세요. 전체 README 읽기 ↗

Configuration

Add the plugin to your ~/.dsh/cordis.patch.yml:

- insert:
    - id: guard
      name: dsh-guard
      config:
        # Additional path patterns to restrict
        denyPaths:
          - "~/company-secrets/**"
          - "**/.vault-token"

        # Additional commands requiring user confirmation
        askCommands:
          - id: terraform-apply
            re: "\\bterraform\\s+apply\\b"
            reason: "infrastructure deployment via terraform apply"

        # Output warnings on intercepted actions
        logDecisions: true