dsh-guard-suite: A DSH plugin that chains guard plugins into one health check
feely0208/dsh-guard-suite
A DSH plugin that runs every installed guard plugin's rules in one pass and produces a module-grouped security and compliance audit report, with JSON/HTML output and CI gating.
dsh-guard-suite is an orchestration plugin for DeepSeek Harness that ships no rules of its own and instead gathers the rules from the guard plugins you already installed, running every applicable check in a single pass. It addresses the problem of guard plugins working in isolation and leaving you without one unified conclusion when materials must be submitted, producing a report grouped by plugin with rule counts, hit counts, and high/medium/low breakdown. Zero-hit plugins and inapplicable rules are called out separately, and JSON or HTML output plus exit codes plug into pipelines.
How to Install
dsh plugin --profile web add @deepwhale-cn/dsh-guard-suite- Category
- Development & Operations
- Platform
- DSH Plugin
- Author
- feely0208
- Distribution
- Plugin
dsh-guard-suite Key Features
dsh-guard-suite Repo Summary
What Does It Do?
DSH Guard Suite is a DSH plugin for DeepSeek Harness that orchestrates the guard plugins you already have installed and runs all applicable checks in one pass, producing a single module-grouped report. It solves the problem of running a pile of guard plugins one by one and still lacking a unified conclusion when you need to hand in materials. It ships no rules of its own — every check comes from the installed guard plugins, and it runs whichever ones it finds. Maintained by feely0208 under the MIT license.
Core Features
- Batch orchestration: discovers guard plugins from sibling directories, dependency folders, or an environment variable, covering every installed plugin in one run without network access or rule downloads.
- Grouped report: lists rule counts and hit counts per plugin with high/medium/low breakdown, and still shows plugins with zero hits so you can tell "checked and clean" from "never checked."
- Inapplicable rules listed separately: rules skipped because the project did not trigger them are called out, keeping "not run" distinct from "ran and passed."
- Multiple output formats: terminal text, JSON for CI or doc generation, and HTML reports for screenshot archiving.
- Selective runs: run only chosen modules, skip specific ones, or list installed plugins first to confirm coverage.
- CI gate: set a hit threshold with
--fail-on(default high) and use exit codes 0/1/2 in pipelines.
How to Use This Plugin?
After enabling it in DSH, list the installed plugins first to confirm coverage, then run the suite against your project root to execute all applicable checks. Add JSON output for CI or documentation, or HTML output for an archived report; use the only/skip options to narrow or exclude modules. If no rule source is found, the plugin exits with an error (exit 2) and prints the paths it searched instead of faking a pass. It reports facts and evidence only — it does not judge compliance and does not replace audits.
How to Troubleshoot This Plugin?
If the run exits with code 2 and reports that no guard plugin rules were found, no rule actually ran — this is not a clean project. Confirm the guard plugins are installed per the official instructions and check that the rule search paths resolve. Exit code 1 means hits reached the --fail-on threshold, which is the expected gate result; adjust the threshold or fix the reported items.
This page is an independent rewrite of the plugin's official README — for authoritative documentation and the latest changes, refer to the source: feely0208/dsh-guard-suite. The plugin is third-party code that runs on your machine once installed; inclusion does not imply endorsement — please review the source before installing.