BriefsToolPreview
GitHub introduces package firewall for AI coding agents and CI/CD hosts
GitHub released a package firewall in public preview to inspect metadata requests and package downloads for malicious activity.
Summary
GitHub introduced a package firewall to protect CI/CD hosts and coding agents from malware attacks during package installation. The firewall inspects metadata requests and package downloads against enterprise policies and the GitHub Advisory Database. It is currently available in public preview for GitHub Enterprise Cloud customers and supports npm packages.
What changed
- GitHub added a package firewall to inspect metadata and downloads for malware.
- Administrators can configure policy controls including a cooldown period and vulnerability checks.
- The firewall currently supports npm packages.
- The service is free during the public preview period.
Availability
Preview“The package firewall is available today in public preview for all GitHub Enterprise Cloud customers, including data-resident GitHub Enterprise Cloud.”
Pricing
| Plan | Price, as stated | Checked |
|---|---|---|
| preview period | free“The service is free while in the preview period.” source |
Prices as stated by the company; we don’t convert or estimate.
Founder takeaway
Enterprise users can test the new package firewall for npm dependencies to secure coding agents and CI/CD pipelines.
Source
Researched and drafted with AI from the official sources above, then checked automatically before publishing. Spotted a mistake? Tell us.
Related
More briefs
Vercel adds sandbox plugin support for running Paseo AI agents
Paseo now supports running AI agents in the cloud using the Vercel Sandbox plugin.
Vercel1 min read
Vercel introduces Virtual Models on AI Gateway for AI apps
Vercel released Virtual Models on AI Gateway to let developers manage model strings and fallbacks centrally.
Vercel1 min read
Vercel CLI allows AI agents to enable web analytics and observability
AI agents can now enable Web Analytics and Observability Plus for projects without requiring an interactive terminal.
Vercel1 min read
One email, every Monday
Briefs are published here through the day. Monday Heist is the email: one useful AI workflow, the files to use it, and the catch. The first issue is being prepared; subscribers get it first. Free, and you can leave in one click.
One email. Every Monday.