GSC plugin ready — interested in integration?

GSC plugin ready — interested in integration?

Hi, I'm the author of GSC (Git Security Checker) — a deterministic security scanner with PoC generation and proof-of-fix verification.

I've built a deepsec plugin that bridges GSC's deterministic verification with deepsec's LLM-based scanning:

Repo: https://github.com/poliakarmai/deepsec-plugin-gsc Install: npm install github:poliakarmai/deepsec-plugin-gsc (npm publish pending)

What it does

1. 3 deterministic matchers ported from GSC's Python detectors:

   • gsc-llm-eval-injection — eval()/new Function() on untrusted input
   • gsc-llm-nosql-injection — NoSQL operator injection
   • gsc-llm-command-injection — command injection via exec/system

2. PoC verifier notifier — runs GSC on each finding to confirm it's real (not a false positive) and returns verification metadata.

3. Tests — npm test runs 14 vitest cases: positive/negative for each matcher (eval, NoSQL operator/predicate, command injection), test-file skipping, and line-number/snippet reporting from the shared regexMatcher.

Why this exists

deepsec finds candidates well, but LLM verdicts are probabilistic. GSC provides deterministic proof — same finding, same PoC, every time. This plugin bridges the two: deepsec's breadth + GSC's precision.

Questions

1. Is there interest in integrating a verifier layer like this into deepsec's workflow?
2. Should this be a plugin (current approach) or integrated into core as a verify command?
3. Are there architectural considerations I'm missing?

Happy to adjust the approach based on your feedback.

Thanks, Alexey Polyakov