zoahdev / dsh-poison-guard-action

dsh-poison-guard-action

A GitHub Action that scans a DeepSeek Harness plugin for supply-chain poisoning before you publish or merge — powered by dsh-poison-guard (AST analysis via NodeSecure JS-X-Ray + deobfuscation decoder + regex heuristics).

One line in your workflow turns "it loads" into "it was scanned for obfuscated exfiltration, dynamic eval, hidden shell commands, and install-time scripts".

Usage

name: plugin
on: [push, pull_request]

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: zoahdev/dsh-poison-guard-action@v1
        with:
          path: .

Inputs

Input	Default	Meaning
path	.	Plugin directory to scan
version	v0.2.0	dsh-poison-guard release tag to install
fail_on	MALICIOUS	Verdict that fails the job (MALICIOUS or SUSPICIOUS)

Outputs

Output	Meaning
verdict	CLEAN, SUSPICIOUS, or MALICIOUS

Findings are surfaced as GitHub annotations (::error for HIGH, ::warning for MEDIUM) and written to the run summary.

Why

DeepSeek Harness plugins are distributed as source checkouts, npm packages, and git tarballs — any of which can carry an obfuscated require, a base64-hidden exfiltration URL, or a postinstall shell command. This action runs the same AST + deobfuscation scan a maintainer would run before any user installs the plugin.

License

MIT

中文说明

一个 GitHub Action，在你的 DeepSeek Harness 插件发布或合并之前做供应链投毒扫描，底层是 dsh-poison-guard（AST 分析 NodeSecure JS-X-Ray + 反混淆解码 + 正则启发式）。

一行配置，把「能加载」变成「被扫描过」：混淆的外发、动态 eval、隐藏的 shell 命令、安装脚本，都会被标出来。

用法

name: plugin
on: [push, pull_request]

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: zoahdev/dsh-poison-guard-action@v1
        with:
          path: .

输入参数

参数	默认值	说明
path	.	要扫描的插件目录
version	v0.2.0	安装的 dsh-poison-guard release 标签
fail_on	MALICIOUS	触发失败的最低级别（MALICIOUS 或 SUSPICIOUS）

输出

输出	说明
verdict	CLEAN / SUSPICIOUS / MALICIOUS

发现的问题会以 GitHub 注解呈现（HIGH→::error，MEDIUM→::warning），并写入运行摘要。

为什么需要它

DeepSeek Harness 插件以源码、npm 包、git tarball 多种形式分发，任何一个都可能夹带混淆的 require、base64 藏的外发 URL、或 postinstall 里的 shell 命令。这个 Action 在用户安装前，先跑一遍维护者会跑的 AST + 反混淆扫描。

许可

MIT