Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
By Sarah Gooding - Oct 20, 2026
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
dsh-code-security
Advanced tools
dsh-code-security
对代码与 Git 改动进行本地静态安全检查，并追踪修复结果。
欢迎使用，遇到问题或有改进建议，请提交 issues 和 PR。
功能
- 扫描文件、目录或 Git diff，报告规则、位置与代码证据。
- 在 DSH 设置中查看新增问题、检查覆盖、脱敏证据，并复查修复结果。
- 可选 Betterleaks 密钥检测、Semgrep CE 数据流规则、OSV 依赖漏洞审计。
- 导出 Markdown / SARIF，维护基线；可按项目开启安静的自动改动检查。
安装
桌面版可在「插件」面板按包名 dsh-code-security 安装。已配置 dsh 命令时也可使用：
dsh plugin --profile desktop add dsh-code-security
网页版把命令中的 desktop 改为 web。安装后重启 DSH。
开始使用
安装后可说：“审查当前 Git 改动的安全问题，给出位置和证据，再复查修复结果。”之后可在「设置 → 代码安全」查看项目与检查结果。
依赖与配置
默认仅运行本地内置规则。增强程序由用户自行安装，未安装也可使用基础检查。联网依赖审计需明确选择；自动检查默认关闭。完整检测到的密钥会在返回、保存和导出前脱敏。
详细配置、工具参数与排错见使用说明。从源码独立开发时，Node 要求以 package.json 为准。
文档
License
FAQs
对代码与 Git 改动进行本地静态安全检查，并追踪修复结果。
We found that dsh-code-security demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 20 Oct 2026
Related posts
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
By Sarah Gooding - Oct 16, 2026
Security News
Anthropic Gives Open Source Maintainers a Fast Track to Mythos Vulnerability Findings
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.
By Sarah Gooding - Oct 15, 2026