dylanXM/deepseek-scanner

Review signals: 8 known vulnerability.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

OSV reports a known vulnerability in this dependency version. requests 4 findings.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Human-readable evidence report on stdout: Real input produced the expected result: # DeepSeek Exposure Scan - Evidence Report

  Source: # Human-readable evidence report on stdout

  Input: tests/fixtures/positive

  Expected: Markdown evidence report header printed

  Command: <guest-path> scan <guest-path>

  Observed: # DeepSeek Exposure Scan - Evidence Report Generated by `deepseek-scan` (tool v0.1.0, rules v2026.10.22.1). | Field | Value | |---|---| | Scan target | `<guest-path> | | Timestamp (UTC) | 2026-10-26T13:02:10Z | | Files scanned | 9 | | Total findings | 26 | This report lists indicators of DeepSeek components found in the scanned tree, with file-and-line evidence, so the results can be handed to an engineering, security or contracts team for review and remediation. Read the **Detection limits** section before drawing conclusions from it. ## Summary by seve

• CI gate exits 1 on high or critical findings: Real input produced the expected result: | Total findings | 26 |

  Source: # CI gate: exit 1 if any critical or high finding exists

  Input: tests/fixtures/positive with --fail-on high

  Expected: exit code 1 and report total 26

  Command: <guest-path> scan <guest-path> --fail-on high

  Observed: | Total findings | 26 | This report lists indicators of DeepSeek components found in the scanned tree, with file-and-line evidence, so the results can be handed to an engineering, security or contracts team for review and remediation. Read the **Detection limits** section before drawing conclusions from it. ## Summary by severity | Severity | Findings | |---|---| | critical | 2 | | high | 22 | | medium | 2 | ## Findings ### Critical #### DeepSeek hosted API endpoint (DS-001) - Location: `app.py:8` - Component: api.deepseek.com (hosted-api-endpoint) - Evidence type: api_endpoint ``` bas

Examples

• Scan the sample project and write a markdown evidence report: command completed successfully

  Source: README.md Quick start / Example output

  Input: tests/fixtures/positive

  Expected: markdown report with 26 findings

  Command: <guest-path> scan <guest-path> --out <guest-path>

  Observed: t gateway's own domains and model names; or any use that leaves no artifact in the scanned tree. A report with findings is evidence that the listed indicators are present at the listed locations. A report without findings means only that none of the indicators in the current rule set were found in the scanned tree; it is not proof that no DeepSeek-derived component exists in a product. Determinations about obligations under DHS Exclusion and Removal Order #2026-01 or FAR 52.204-30 rest with each organization and its counsel. This tool is an evidence-collection aid, not a legal determination.

• Project test suite (README Contributing: run pytest): command completed successfully

  Source: README.md ## Contributing

  Input: tests/

  Expected: 17 passed

  Command: <guest-path> -q

  Observed: ................. [100%] 17 passed in 0.44s

• Lint check (README Contributing: ruff check src tests): command completed successfully

  Source: README.md ## Contributing

  Input: src tests

  Expected: All checks passed!

  Command: <guest-path> check src tests

  Observed: All checks passed!

Local or hosted: both

Scan a source tree for DeepSeek exposure indicators and write an evidence report (deepseek-scan scan <path>, markdown to stdout or --format json --out FILE, --fail-on CI gate)

cd <guest-path> && pwd && ls -la && id -u && python3 --version && cat README.md 2>/dev/null | head -c 6000
echo "CDP_URL=$CDP_URL"; curl -s -m 10 -w '\nHTTP %{http_code}\n' "$CDP_URL/json/version" ; ls /inputs 2>/dev/null
cd <guest-path> && tail -c 2300 README.md; echo ----; cat pyproject.toml | head -50; ls src/* examples tests .coldpass
cd /tmp && python3 -m venv <guest-path> 2>&1 | tail -3; <guest-path> -V && <guest-path> install -q <guest-path> 2>&1 | tail -5; ls <guest-path> | grep deepseek
cd /tmp && <guest-path> scan <guest-path> | head -60; echo "rc=${PIPESTATUS[0]}"
mkdir -p <guest-path> && cd /tmp && <guest-path> scan <guest-path> --format json --out <guest-path>; echo "rc=$?"; ls -la <guest-path>; head -c 700 <guest-path>; echo; <guest-path> scan <guest-path> --fail-on high >/dev/null; echo "fail-on rc=$?"
rm -f <guest-path> && cd <guest-path> && <guest-path> install -q pytest ruff 2>&1 | tail -3; <guest-path> -q -p no:cacheprovider 2>&1 | tail -5; echo "pytest rc=${PIPESTATUS[0]}"; <guest-path> check src tests 2>&1 | tail -3; echo "ruff rc=${PIPESTATUS[0]}"
cd <guest-path> && grep -rniE "cron|schedul|webhook|--once|--now|while True|loop|daemon|sleep" src/ action.yml examples/ .github/ 2>/dev/null | head -20; echo "grep rc=$?"; cat src/deepseek_scan/cli.py | head -80
cd <guest-path> && mkdir -p .coldpass && grep -c "# Human-readable evidence report on stdout" README.md && grep -c "# CI gate: exit 1 if any critical or high finding exists" README.md && cat > .coldpass/claims.json <<'EOF'
[
  {"kind":"claim","claim":"Human-readable evidence report on stdout","source":"# Human-readable evidence report on stdout","input":"tests/fixtures/positive","expected":"Markdown evidence report header printed","probe_kind":"cli","argv":["<guest-path>","scan","<guest-path>"],"stdin":"","expected_text":"# DeepSeek Exposure Scan - Evidence Report","cwd":"/tmp"},
  {"kind":"claim","claim":"CI gate exits 1 on high or critical findings","source":"# CI gate: exit 1 if any critical or high finding exists","input":"tests/fixtures/positive with --fail-on high","expected":"exit code 1 and report total 26","probe_kind":"cli","argv":["<guest-path>","scan","<guest-path>","--fail-on","high"],"stdin":"","expected_returncode":1,"expected_text":"| Total findings | 26 |","cwd":"/tmp"}
]
EOF
python3 -I -m json.tool .coldpass/claims.json >/dev/null && echo claims-ok
cd <guest-path> && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","scan","<guest-path>","--format","json","--out","<guest-path>"],"cwd":"/tmp","env":{},"expected_file":"<guest-path>","expected_text":"\"total_findings\": 26"}
EOF
cat > .coldpass/examples.json <<'EOF'
[
  {"kind":"example","claim":"Scan the sample project and write a markdown evidence report","source":"README.md Quick start / Example output","input":"tests/fixtures/positive","expected":"markdown report with 26 findings","argv":["<guest-path>","scan","<guest-path>","--out","<guest-path>"],"cwd":"/tmp","env":{},"expected_file":"<guest-path>","expected_text":"| Total findings | 26 |"},
  {"kind":"example","claim":"Project test suite (README Contributing: run pytest)","source":"README.md ## Contributing","input":"tests/","expected":"17 passed","argv":["<guest-path>","-q"],"cwd":"<guest-path>","env":{},"expected_text":"17 passed"},
  {"kind":"example","claim":"Lint check (README Contributing: ruff check src tests)","source":"README.md ## Contributing","input":"src tests","expected":"All checks passed!","argv":["<guest-path>","check","src","tests"],"cwd":"<guest-path>","env":{},"expected_text":"All checks passed!"}
]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README, pyproject.toml, src/deepseek_scan/cli.py, action.yml, examples/ and .github/: deepseek-scan is a one-shot CLI (scan <path>) with no cron, scheduler, loop, webhook or --once/--now trigger. Only CI workflow/action runs exist, which are not product cycles.","checks":[]}
EOF
for f in probe claims examples cycles; do python3 -I -m json.tool .coldpass/$f.json >/dev/null && echo "$f ok"; done; ls <guest-path>
ls -la <guest-path> /inputs/ 2>&1 | head; cd /tmp && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -60; echo "rc=${PIPESTATUS[0]}"
ls -la <guest-path>; pgrep -fa deepseek-scan || echo "no servers running"; cd <guest-path> && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Scan a source tree for DeepSeek exposure indicators and write an evidence report (deepseek-scan scan <path>, markdown to stdout or --format json --out FILE, --fail-on CI gate)","operation_scope":"Local, read-only static scan of a directory; no network calls. Requires Python 3.10+ (ran on 3.12.3) in a venv; no third-party runtime dependencies. Tested on the bundled tests/fixtures/positive sample project. Browser endpoint CDP_URL was reachable (HTTP 200) but not used, since the product is a CLI.","steps":["python3 -m venv <guest-path>","<guest-path> install <guest-path>  (README 'Install', from a checkout)","<guest-path> scan <guest-path>  (README Quick start: stdout report, 26 findings)","<guest-path> scan .../tests/fixtures/positive --format json --out <guest-path>  (README Quick start JSON output)","<guest-path> scan .../tests/fixtures/positive --fail-on high  (README CI gate: exit 1 observed)","<guest-path> install pytest ruff; pytest -q (17 passed); ruff check src tests (clean)"],"deviations":["Used a venv at <guest-path> with absolute binary paths instead of a global pip install, so the guest's system Python was not modified.","Installed pytest and ruff into the venv because README Contributing documents them as dev tools.","Checker path: <guest-path> was used; /inputs/coldpass-preflight.py does not exist in this guest."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
python3 -I -m json.tool .coldpass/report.json >/dev/null && echo report-ok
cd /tmp && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay > <guest-path> 2>&1; echo "rc=$?"; python3 -I -c "import json;d=json.load(open('<guest-path>'));print('valid',d.get('valid'),'problems',d.get('problems'),'replay',d.get('replay',{}).get('status'))"