All how-to guides
Every task guide for the Bytesafe Dependency Firewall, grouped by what you are trying to do.
Task-oriented guides for working with an existing firewall. Each one states a goal, walks the steps, and tells you how to verify the result.
Rules
Delay new versions
Add a delay rule that keeps newly published versions out of your builds until they have aged.
Block vulnerable packages
Block downloads with known vulnerabilities above CVSS and EPSS thresholds.
Block malware
Scan every downloaded and published artifact and block anything flagged as malicious.
Block deprecated packages
Keep versions out of your builds that their own publishers have deprecated, yanked, or unlisted.
Prevent dependency confusion
Stop public registries from serving packages that share names with your internal packages.
Enforce license policy
Block package downloads by license, with named license sets as deny or allow lists.
Block install scripts
Match npm packages that declare install scripts and PyPI sdists that run code at build time.
Scan for secrets on publish
Block publishes of packages that contain leaked credentials, scanned on the upload phase.
Manage exceptions
Create scoped, documented, expiring waivers when a rule blocks a package you need.
Upstreams and config
Configure upstreams
Add, edit, and remove the registries a firewall fetches packages from.
Manage upstream credentials
Set and rotate the credentials a firewall uses against private upstreams.
Manage config as code
Run firewall policy from a git repository, including CI, drift detection, and rollback.
Share configuration across firewalls
Let firewalls inherit rules, exceptions, and upstreams from a baseline firewall.
Integrate with repository managers
Deploy the firewall together with Artifactory, Nexus, GitLab, Azure Artifacts, and other repository managers.
Observability
View logs
Read firewall logs in the dashboard and stream them live with the bsfw CLI.
Investigate a blocked install
Trace a failed install back to the firewall rule that caused it.
Review the audit log
Trace who changed firewall configuration, policy, tokens, and teams.
Receive webhook events
Push firewall, audit, configuration, and publish events to your own systems as signed, batched webhook deliveries.
Access
Manage access
Organize users into teams, set namespace permissions, and grant teams access to specific firewalls.
Manage tokens
Create, scope, and revoke Personal and Service Access Tokens, and keep CI credentials short-lived with Trusted Builders.