GitHub推出包防火墙功能公开预览版

GitHub已推出包防火墙（Package Firewall）功能的公开预览版，旨在检测软件包安装时的恶意活动1。该防火墙部署在Actions运行器和上游软件包仓库之间，通过检查元数据请求和包下载来识别恶意行为1。

该功能目前仅支持npm包，向GitHub Enterprise Cloud客户免费开放1。管理员可配置多种策略控制，包括可调整的冷却期、GitHub Advisory Database的安全通告检查，以及供应链完整性验证（包括对证明降级的检查）1。预览期结束后，该功能将按计量使用方式付费，计费模式与GitHub Actions相似1。

GitHub has introduced Package Firewall, a new security feature now available in public preview for GitHub Enterprise Cloud customers.1 The tool detects malicious activity occurring at the moment packages are installed by monitoring interactions between Actions runners and upstream package repositories.1 It examines metadata requests and package downloads to identify suspicious behavior patterns that could indicate supply chain attacks.1

The feature currently supports npm packages and provides administrators with configurable policy controls to tailor security responses.1 These controls include adjustable cooldown periods, integration with the GitHub Advisory Database for threat checking, and verification of supply chain integrity through attestation downgrade detection.1 During the public preview period, the service is offered at no cost to qualifying customers, with plans to transition to metered usage billing after launch, following a pricing model similar to GitHub Actions.1