Skip to content

Releases: bailong-Hakuryu/dsh-security-assurance

Release list

dsh-security-assurance v0.1.0-rc.9

dsh-security-assurance v0.1.0-rc.9 Pre-release
Pre-release

Choose a tag to compare

View all tags
@bailong-Hakuryu bailong-Hakuryu released this 31 Aug 05:39
v0.1.0-rc.9
2969496

中文

DeepSeek Harness 策略驱动的仓库安全评估插件（0.1.0 RC）。

  • 提供 /security 指令和评估路由
  • 支持仓库目录、评估启动、状态、发现与导出流程
  • 输出证据、覆盖率与 Verdict
  • 当前内建 node-package-manifest 策略聚焦 package.json 安装生命周期键存在性
  • release:check 已通过：69 个测试文件、343 个测试

安装

pnpm add dsh-security-assurance@0.1.0-rc.9

请参阅 README.md 和 INSTALL.md 了解 DeepSeek Harness 配置方式。此版本为候选发布版（RC），建议先在测试环境验证。

English

Policy-driven repository security assurance plugin for DeepSeek Harness (0.1.0 release candidate).

  • Provides /security command and assessment routing
  • Supports catalog, assessment start, status, findings, and export workflows
  • Produces evidence, coverage, and verdicts
  • The built-in node-package-manifest policy currently focuses on the presence of package.json install-lifecycle keys
  • release:check passed: 69 test files and 343 tests

Installation

pnpm add dsh-security-assurance@0.1.0-rc.9

See README.md and INSTALL.md for DeepSeek Harness configuration details. This is a release candidate; validate it in a test environment first.

Loading

dsh-security-assurance v0.1.0-rc.10

dsh-security-assurance v0.1.0-rc.10 Pre-release
Pre-release

Choose a tag to compare

View all tags
@bailong-Hakuryu bailong-Hakuryu released this 31 Aug 14:31
v0.1.0-rc.10
60db487

中文

v0.1.0-rc.10 完成 dsh.so 阻塞项整改，并把 Subject Freeze 的 Git 执行迁移到 DeepSeek Harness 受管子进程边界。

  • Git 使用固定 argv、无 shell，并由 ctx.subprocess 管理整棵进程树、取消和退出等待。
  • 子进程继承环境会清除凭据及可能重定向 Git 仓库、索引或对象库的 ambient 变量。
  • 保留二进制 blob 的原始字节语义和 80 MiB 输出上限。
  • 测试用假凭据改为运行时拼装，保持拒绝与脱敏断言，同时避免静态扫描误判为真实秘密。
  • README 增加可直接复制的 GitHub Release 安装命令和明确的 Harness 兼容版本。

安装：

dsh plugin --profile web add https://github.com/bailong-Hakuryu/dsh-security-assurance/releases/download/v0.1.0-rc.10/dsh-security-assurance-0.1.0-rc.10.tgz

发布门禁：类型检查、构建、70 个测试文件 / 348 个测试、42 文件打包清单及真实 Harness Web Profile smoke 全部通过。

English

v0.1.0-rc.10 resolves the blocking dsh.so findings and routes Subject Freeze Git execution through the DeepSeek Harness managed subprocess boundary.

  • Fixed argv, no shell, tree-scoped cancellation and quiescent teardown through ctx.subprocess.
  • Credential-scrubbed environment with ambient Git repository, index and object-store redirects removed.
  • Byte-exact binary blob handling and the existing 80 MiB output ceiling are preserved.
  • Clearly fake credential fixtures are assembled at test runtime without weakening rejection or redaction assertions.
  • README now includes a copy-ready GitHub Release install command and explicit Harness compatibility.

Release gates passed: typecheck, build, 70 test files / 348 tests, the 42-file package manifest, and the real Harness Web profile smoke test.

Loading