dsh-code-security
Advanced tools
对代码与 Git 改动进行本地静态安全检查，并追踪修复结果。
欢迎使用，遇到问题或有改进建议，请提交 issues 和 PR。
桌面版可在「插件」面板按包名 dsh-code-security 安装。已配置 dsh 命令时也可使用：
dsh plugin --profile desktop add dsh-code-security
网页版把命令中的 desktop 改为 web。安装后重启 DSH。
安装后可说：“审查当前 Git 改动的安全问题，给出位置和证据，再复查修复结果。”之后可在「设置 → 代码安全」查看项目与检查结果。
默认仅运行本地内置规则。增强程序由用户自行安装，未安装也可使用基础检查。联网依赖审计需明确选择；自动检查默认关闭。完整检测到的密钥会在返回、保存和导出前脱敏。
详细配置、工具参数与排错见使用说明。从源码独立开发时，Node 要求以 package.json 为准。
FAQs
对代码与 Git 改动进行本地静态安全检查，并追踪修复结果。
The npm package dsh-code-security receives a total of 418 weekly downloads. As such, dsh-code-security popularity was classified as not popular.
We found that dsh-code-security demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.
Security News
Cloudflare introduces tsrs, a Rust port of TypeScript’s compiler promising faster checks and lower memory use, with the TypeScript team’s help.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.