dsh-security-scan

Secret & dangerous-pattern scanner for DeepSeek Harness — a security_scan tool that finds leaked API keys, tokens, private keys and credential files, with full redaction.

AI 분석

核心用途是防止 AI 代理在操作项目时意外泄露敏感凭证。适合在开源或公共仓库中进行代码开发、注重安全合规的团队与个人。

other

패키지: dsh-security-scan
버전: 0.1.0
최근 업데이트: 2026. 8. 13.

설치

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:ben7am1n/dsh-security-scan

문서

전체 README 읽기 ↗

Configuration

All keys live under the dsh-security-scan row's config:

Key	Type	Default	Meaning
`paths`	string[]	`['.']`	Directories to scan (relative to harness cwd).
`ignored`	string[]	`['node_modules','.git','dist','build']`	Directory basenames skipped during traversal.
`maxFileSizeBytes`	number	`1048576`	Files larger than this are skipped.
`maxMatchesPerFile`	number	`10`	Max findings reported per file.