{"slug": "github-package-firewall-in-public-preview", "title": "GitHub package firewall in public preview", "summary": "GitHub released a package firewall in public preview for all GitHub Enterprise Cloud customers, including data-resident GitHub Enterprise Cloud, to block malicious packages before installation. The firewall sits between endpoints such as Actions runners and coding agents and upstream package registries, inspecting metadata requests and downloads against administrator-set policies that include a configurable cooldown period, GitHub Advisory Database malware and vulnerability checks, and supply-chain checks like attestation downgrades. The service is free during the preview, will be charged on metered usage at general availability similar to Actions billing, and currently supports only npm packages.", "body_md": "# GitHub package firewall in public preview\n\nAn increasing number of malware attacks exploit systems at package installation time, harvesting credentials on CI/CD hosts or developer workstations without even running the package’s code. To stem this tide of attacks, GitHub is introducing a new package firewall capability. The package firewall sits between endpoints like Actions runners or coding agents and the upstream package repositories, inspecting both metadata requests and package downloads for signs of malicious activity. The package firewall is available today in public preview for all GitHub Enterprise Cloud customers, including data-resident GitHub Enterprise Cloud.\n\n## [How it works](#how-it-works)\n\nFirst, administrators set policy controls for their enterprise. The controls available today include a configurable cooldown period, checking the GitHub Advisory Database for malware or vulnerability alerts, and supply-chain checks like attestation downgrades.\n\nThen endpoints like coding agents and CI/CD hosts need configuration to use the firewall for their requests instead of pointing directly at the upstream package registries. Metadata requests for package lists as well as the actual package downloads then flow through the firewall, which evaluates them against the policy. If a package is blocked erroneously, the user can request an exception with a workflow similar to other GitHub Advanced Security features.\n\n## [Availability and limitations](#availability-and-limitations)\n\nThe package firewall is available in public preview as we scale up the infrastructure behind it and continue to add features based on customer demand. It is available to GitHub Enterprise Cloud customers, including GitHub Enterprise Cloud with data residency. The service is free while in the preview period. When it reaches general availability, it will be charged based on metered usage, similar to Actions billing.\n\nCurrently the package firewall only supports npm packages.\n\n## [How to use it](#how-to-use-it)\n\nFor detailed setup instructions, see [Protecting endpoints with package firewall](https://docs.github.com/enterprise-cloud@latest/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/protecting-endpoints-with-package-firewall). Join the discussion in [GitHub Community](https://github.com/orgs/community/discussions/210809).", "url": "https://wpnews.pro/news/github-package-firewall-in-public-preview", "canonical_source": "https://github.blog/changelog/2026-10-20-github-package-firewall-in-public-preview", "published_at": "2026-10-20 16:11:53+00:00", "updated_at": "2026-10-20 17:16:15.732640+00:00", "lang": "en", "topics": ["ai-agents", "developer-tools", "ai-safety"], "entities": ["GitHub", "GitHub Enterprise Cloud", "GitHub Actions", "GitHub Advisory Database", "GitHub Advanced Security", "npm"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/github-package-firewall-in-public-preview", "markdown": "https://wpnews.pro/news/github-package-firewall-in-public-preview.md", "text": "https://wpnews.pro/news/github-package-firewall-in-public-preview.txt", "jsonld": "https://wpnews.pro/news/github-package-firewall-in-public-preview.jsonld"}}