Block Public Package Registries

When you route package traffic through a private registry, developers can still bypass the setup by pointing their package manager directly at the public registry. Device Protection enforces that all traffic goes through your approved private registry instead.

How it works

Device Protection monitors network traffic on each device. When a request goes directly to a public package registry, it is blocked at the network level before the package is downloaded.

Prerequisites

• Aikido Device Protection deployed on developer machines. See Deploying Device Protection.
• Your private registry added under Custom Registries, so installs through it keep working once the public registry is blocked.

Configure the block

1. Go to Device Protection and open the Settings tab.
2. Click the ecosystem you want to block.
3. Turn on Block All Installs.

Repeat for every ecosystem you route through a private registry.

Need to let a specific package or team through? Add an exception under the same ecosystem. See Configuring Installation Policies.