CATEGORY
Verified manifests and exact versions in this category.
@deepwhale-cn/dsh-incident-packageIf an incident is investigated, can you produce the evidence? Contingency plans, contacts, log preservation, reporting procedures—if you do not prepare in advance, it will be too late when trouble arises.
@deepwhale-cn/dsh-key-rotateCheck how long it has been since keys and certificates were changed, and whether there is a rotation policy—keys that are not changed for a long time often go unnoticed but pose real risks.
@deepwhale-cn/dsh-least-privilegeCheck for excessive permissions: containers running as root, wildcard IAM, fully open CORS, tokens requesting admin — excessive permissions amplify intrusions
@deepwhale-cn/dsh-license-guardOpen-source license compliance check: scan the dependency tree to identify risks such as GPL/AGPL copyleft propagation and unknown licenses—run it before publishing, open-sourcing, or undergoing an audit.
