artemiroshnichenko/dsh-plugins--packages-dsh-guard ↗★ 0
dsh-guard
DSH 安全卫士:对敏感路径进行单调拒绝,并对破坏性 Shell 命令设置审批门槛
AI 分析
提供敏感文件路径拦截和高危 Shell 命令(如 terraform apply)二次确认。适合对本地数据安全和系统稳定性有高要求的安全敏感型用户。
安装
此插件尚未提供可验证的 bundle,或兼容性检查未通过。请先阅读仓库说明。 阅读完整 README ↗
说明文档
阅读完整 README ↗Configuration
Add the plugin to your ~/.dsh/cordis.patch.yml:
- insert:
- id: guard
name: dsh-guard
config:
# Additional path patterns to restrict
denyPaths:
- "~/company-secrets/**"
- "**/.vault-token"
# Additional commands requiring user confirmation
askCommands:
- id: terraform-apply
re: "\\bterraform\\s+apply\\b"
reason: "infrastructure deployment via terraform apply"
# Output warnings on intercepted actions
logDecisions: true