dsh-security-guard

DSH runtime security guard plugin — loader import confinement, HTTP Host header validation, and sandbox service deny-list (QVD-2026-52631/57410/52644/52646). AI-assisted patch.

other

包名: dsh-security-guard
版本: 0.1.0
许可证: MIT
最近更新: 2026年9月3日

安装

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:ruanhaodong-tt/dsh-security-guard

说明文档

阅读完整 README ↗

Configuration / 配置

The web guard accepts an optional trustedHosts array for non-loopback authorities that should be allowed:

- insert:
    - id: dsh-security-web
      name: dsh-security-guard/web
      inject: [webServer]
      config:
        trustedHosts: ["harness.internal:3080"]