GitHub previews npm package firewall for coding agents and CI runners

GitHub opened a public preview of a package firewall on October 20, 2026, aimed at screening software dependencies before they reach development machines and automated build systems. The company says the new service sits between package registries and endpoints such as GitHub Actions runners or coding agents, examining package metadata requests as well as downloads.

Enterprise administrators can configure rules including a waiting period for newly available packages, checks against GitHub Advisory Database malware and vulnerability alerts, and supply-chain signals such as changes in package attestations. Organizations must explicitly configure their endpoints to send package traffic through the firewall, rather than assuming that ordinary package installation is automatically protected. When a legitimate package is blocked, users can request an exception through a workflow GitHub compares with its other Advanced Security features.

GitHub says the preview is open to GitHub Enterprise Cloud customers, including those using its data-residency option. The service is free during preview, with metered charges planned after general availability. Initially the firewall supports only npm packages, so teams using other ecosystems should not assume they are covered.

GitHub frames the release as a response to attacks that exploit dependency installation to steal credentials from developer workstations and continuous-integration hosts, sometimes before package code is executed normally. The announcement describes the available controls and rollout, but does not provide an independent measurement of how much malware the preview blocks.