GitHub has launched a public preview of package firewall for Enterprise Cloud customers, including those using data residency. The service sits between endpoints such as CI/CD hosts or coding agents and upstream registries, checking metadata requests and package downloads against enterprise policies. It currently supports only npm packages.
Administrators can configure a cooldown period, checks against the GitHub Advisory Database, and supply-chain checks such as attestation downgrades. Users can request exceptions for incorrect blocks. Endpoints must be configured to route requests through the firewall instead of accessing registries directly.
The service is free during preview. GitHub plans metered usage billing after general availability; the announcement does not specify rates.
Choose a sign-in method or comment as a guest below.