← 返回扫描报告总表 · ← dshlib 图书馆

扫描报告 · xiajiajun516/dsh-config-manager

自研扫描：⚠️ 待审 · GuardDog 复核：未扫描 · OSV 依赖：未扫描

1. 自研扫描（dshlib-scan）

verified

True

findings

{'data_exfiltration': [{'file': 'dsh-config-manager-main/CHANGELOG.md', 'line': 1068, 'match': 'credentials request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-config-manager-main/docs/design/2026-08-20-my-configs-design.md', 'line': 129, 'match': 'tokenProvider: () => Promise<string>, fetcher = fetch', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-config-manager-main/src/index.ts', 'line': 2211, 'match': 'tokenProvider 给空函数（request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-config-manager-main/src/market/github-repos.test.ts', 'line': 147, 'match': "tokenProvider: async () => '', fetch", 'label': '凭据字段进入网络请求'}, {'file': 'dsh-config-manager-main/src/market/github-repos.test.ts', 'line': 443, 'match': "tokenProvider: async () => '', fetch", 'label': '凭据字段进入网络请求'}, {'file': 'dsh-config-manager-main/src/market/github-repos.ts', 'line': 27, 'match': 'tokenProvider 必填；fetch', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-config-manager-main/src/market/github-repos.ts', 'line': 248, 'match': 'token 由 tokenProvider 每次现取），fetch', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-config-manager-main/src/sync/webdav/webdav-transport.test.ts', 'line': 11, 'match': 'credentials.getPassword()），可注入 request', 'label': '凭据字段进入网络请求'}], 'excessive_permissions': [{'file': 'dsh-config-manager-main/src/adapters/pnpm-workspace.ts', 'line': 52, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/adapters/pnpm-workspace.ts', 'line': 62, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/adapters/pnpm-workspace.ts', 'line': 108, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/adapters/pnpm-workspace.ts', 'line': 118, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/adapters/pnpm-workspace.ts', 'line': 126, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/cli/index.ts', 'line': 778, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/client/api.ts', 'line': 411, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/local-plugin-pack.ts', 'line': 173, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/local-plugin-pack.ts', 'line': 294, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/plugin-cli.ts', 'line': 648, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/plugin-cli.ts', 'line': 659, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/reinstall.ts', 'line': 108, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/reinstall.ts', 'line': 196, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/reinstall.ts', 'line': 302, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/reinstall.ts', 'line': 308, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/core/validator.ts', 'line': 27, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/market/git-file-writer.test.ts', 'line': 56, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/market/git-file-writer.ts', 'line': 238, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/market/reader.ts', 'line': 176, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/security/secret-scanner.ts', 'line': 103, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/security/secret-scanner.ts', 'line': 107, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/security/secret-scanner.ts', 'line': 384, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1122, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/sync/git/git-transport.ts', 'line': 437, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/src/ui/selection-model.ts', 'line': 747, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/architecture-boundaries.test.ts', 'line': 143, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/conformance/roundtrip.test.ts', 'line': 552, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/conformance/roundtrip.test.ts', 'line': 732, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/conformance/roundtrip.test.ts', 'line': 732, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/packaging-contract.test.ts', 'line': 196, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/route/route-parity.test.ts', 'line': 124, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/route/route-parity.test.ts', 'line': 126, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/route/route-parity.test.ts', 'line': 138, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/route/route-parity.test.ts', 'line': 165, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/route/route-parity.test.ts', 'line': 167, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/route/route-parity.test.ts', 'line': 168, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-config-manager-main/tests/route/route-parity.test.ts', 'line': 170, 'match': 'exec(', 'label': '命令执行'}], 'hardcoded_secrets': [{'file': 'dsh-config-manager-main/src/adapters/providers.test.ts', 'line': 100, 'match': "token: 'local-token-456'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/adapters/roundtrip.test.ts', 'line': 183, 'match': "secret:'))\n      .map((i) => [i.id, i.kind]);\n    assert.deepEqual(kinds, [\n    ", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/client/run-store.test.ts', 'line': 733, 'match': "token: 'GIT-TOKEN-SECRET'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/client/run-store.test.ts', 'line': 1513, 'match': "token=' + PROFILE_LAUNCH_TOKEN,\n  pid: 4242,\n  logFile: '", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/client/sync/sync-api.test.ts', 'line': 65, 'match': "token: 'ghp_secret'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/client/sync/sync-api.test.ts', 'line': 384, 'match': "password: 'secret-pass'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/client/sync/sync-api.test.ts', 'line': 405, 'match': "password: 'secret-pass'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/core/migration-history.test.ts', 'line': 180, 'match': 'sk-abc1234567890abcdef', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/core/migration-history.test.ts', 'line': 183, 'match': "'sk-abc1234567890abcdef'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/core/migration-history.test.ts', 'line': 198, 'match': 'sk-abc1234567890abcdef', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/core/migration-history.test.ts', 'line': 201, 'match': "'sk-abc1234567890abcdef'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/core/migration-history.test.ts', 'line': 189, 'match': "secret = 'a1b2c3d4e5f60718293a4b5c6d7e8f90a1b2c3d4e5f6'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/core/migration-history.test.ts', 'line': 211, 'match': "secret = 'a1b2c3d4e5f60718293a4b5c6d7e8f90a1b2c3d4e5f6'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/core/phase3-security.test.ts', 'line': 28, 'match': "secret = 'ab31f9c2d84e7a6059b3c1d8e2f4a6b7c9d0e'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/index.sync.test.ts', 'line': 85, 'match': "password: 'pw-secret'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/market/git-file-writer.test.ts', 'line': 17, 'match': 'gho_abcdefghijklmnopqrstuvwxyz123456', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/market/github-repos.test.ts', 'line': 48, 'match': 'gho_abcdefghijklmnopqrstuvwxyz123456', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/profiles/dsh-profile-launcher.ts', 'line': 138, 'match': "token='))\n  if (candidates.length === 0) return null\n  if (port !== undefined) {", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 676, 'match': 'sk-abc1234567890abc', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 692, 'match': "'sk-abc1234567890abc'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 755, 'match': "'sk-abc1234567890abc'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 758, 'match': 'sk-abc1234567890abc', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 867, 'match': "'sk-abc1234567890abc'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 952, 'match': '"sk-abc1234567890abc"', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 953, 'match': "'sk-abc1234567890abc'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 966, 'match': 'sk-abc1234567890abc', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 967, 'match': "'sk-abc1234567890abc'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 978, 'match': '"sk-abc1234567890abc"', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 678, 'match': 'AKIAIOSFODNN7A1B2C3D', 'label': 'AWS access key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 701, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 710, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 868, 'match': 'AKIAIOSFODNN7A1B2C3D', 'label': 'AWS access key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 966, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 968, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 273, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 619, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 679, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 786, 'match': 'ghp_abcdefghijklmnopqrstuvwxyzABCDEF', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1041, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 338, 'match': "password = 'my-secret-password-123'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 370, 'match': "password = 'archive-password-123'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 386, 'match': "password = 'right-password'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 755, 'match': "token: 'sk-abc1234567890abc'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 820, 'match': "token: 'your-token'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 822, 'match': "secret: '{{MY_SECRET}}'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 823, 'match': "password: 'process.env.PASSWORD'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 835, 'match': "token: 'sk-proj-9f8e7d6c5b4a3210abcdef'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 845, 'match': "token: 'your-token'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 891, 'match': "token: 'your-token'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 932, 'match': "token: 'your-token'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1046, 'match': "password = 'backup-password-123'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1088, 'match': "password = 'backup-password-123'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1146, 'match': "password = 'backup-password-123'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1206, 'match': "secret:')).map((i) => [i.id, i.kind]),\n      [['", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1216, 'match': "secret:')).map((i) => [i.id, i.kind]),\n      [['", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1226, 'match': "secret:')).map((i) => [i.id, i.kind]),\n      [['", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1257, 'match': "password = 'backup-password-123'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/security/security.test.ts', 'line': 1296, 'match': "password = 'archive-whole-backup-pw'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/github-auth.test.ts', 'line': 141, 'match': "token: 'gho_secret_123'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/github-auth.test.ts', 'line': 163, 'match': "token: 'gho_secret_123'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/github-auth.test.ts', 'line': 197, 'match': "token: 'gho_ok_token'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-credentials.test.ts', 'line': 259, 'match': "secret:'))\n      .map((i) => [i.id, i.kind]);\n    assert.deepEqual(secretItems, ", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-credentials.test.ts', 'line': 274, 'match': "secret:')),\n    };\n    const report = await engine.applyItems(preview.zipPath, p", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-credentials.test.ts', 'line': 310, 'match': "secret:')),\n      [],\n      '", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-credentials.test.ts', 'line': 347, 'match': "secret:')),\n    };\n    const report = await dstEngine.applyItems(preview.zipPath", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-engine.test.ts', 'line': 455, 'match': "password: 'pw-12345678'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-engine.test.ts', 'line': 488, 'match': "password: 'pw-12345678'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-engine.test.ts', 'line': 547, 'match': "password: 'pw-12345678'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-engine.test.ts', 'line': 556, 'match': "password: 'pw-12345678'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/sync/sync-engine.test.ts', 'line': 1451, 'match': "password: 'pw-12345678'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/ui/errors.test.ts', 'line': 31, 'match': 'sk-abcdef1234567890', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/ui/errors.test.ts', 'line': 32, 'match': "'sk-abcdef1234567890'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/ui/report.ts', 'line': 90, 'match': "secret:')) return '", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/ui/sync-settings-view.test.ts', 'line': 30, 'match': "token: '  GIT-TOKEN  '", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/ui/sync-settings-view.test.ts', 'line': 59, 'match': "token: '  GIT-TOKEN  '", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/ui/sync-settings-view.test.ts', 'line': 73, 'match': "password: 'WEBDAV-PASS'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 230, 'match': "'sk-abc1234567890123456789012'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 242, 'match': "'sk-abc1234567890123456789012'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 234, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz0123456789', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 246, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz0123456789', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 91, 'match': "password: 'plain-text'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 92, 'match': "password: 'plain-text'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 147, 'match': "api_key: 'sk-plain'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 161, 'match': "api_key: 'sk-leak-1'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/src/utils/logger.test.ts', 'line': 203, 'match': "api_key: 'sk-plain-in-custom-sink-0003'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/tests/client/import-wizard-redaction.test.ts', 'line': 8, 'match': 'sk-A1b2C3d4E5f6G7h8I9j0K1l2', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/tests/core/exporter.test.ts', 'line': 387, 'match': 'ghp_0123456789abcdefghijABCDEF', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/tests/core/exporter.test.ts', 'line': 388, 'match': 'ghs_0123456789abcdefghijABCDEF', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/tests/core/exporter.test.ts', 'line': 217, 'match': "token: 'abc123token'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/tests/core/exporter.test.ts', 'line': 250, 'match': "secret = 'sk-vaulT-secret-777'", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/tests/core/exporter.test.ts', 'line': 338, 'match': 'password: "sk-live-binary-should-be-skipped"', 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/tests/security/credentials-refs-import.test.ts', 'line': 184, 'match': "secret:')).map((i) => [i.id, i.kind]),\n      [['", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/tests/security/credentials-refs-import.test.ts', 'line': 192, 'match': "secret:')).map((i) => [i.id, i.kind]),\n      [\n        ['", 'label': '明文凭据'}, {'file': 'dsh-config-manager-main/tests/security/redaction-log.test.ts', 'line': 39, 'match': 'sk-abc1234567890abcdef', 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/tests/security/redaction-log.test.ts', 'line': 40, 'match': "'sk-abc1234567890abcdef'", 'label': 'OpenAI API key'}, {'file': 'dsh-config-manager-main/tests/security/redaction-log.test.ts', 'line': 39, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz', 'label': 'GitHub token'}, {'file': 'dsh-config-manager-main/tests/security/redaction-log.test.ts', 'line': 41, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz', 'label': 'GitHub token'}], 'dangerous_commands': [{'file': 'dsh-config-manager-main/tests/cli/reinstall.test.ts', 'line': 74, 'match': "rm -rf '/home/", 'label': 'rm -rf 危险删除'}], 'manifest_contract': [{'file': 'package.json', 'line': 0, 'match': 'main: ./lib/index.js', 'label': 'main 入口「./lib/index.js」在包内不存在——加载会报 Cannot find module'}]}

mode

git-refresh

branch

main

2. 第三方复核（GuardDog 3.2.0）

未复核。

3. 依赖漏洞（OSV.dev）

未查询。