Prevents blacklisted packages and package versions from being added to a registry
What are Policies?
Policies are rules that are executed before any registry action is applied. Example policy rules include freezing registries (making them read only) and only allowing packages that are scanned and secure.
How to configure Policies
Policies are configured on a per registry level and configurations are not shared between registries. This allows users to tailor registries to different needs.
Configuration is done in the Plugins tab for a registry.
To enable a policy you require, toggle the selected switch to enabled.
Some policies include additional settings that allow more fine-grained control over how the policies functions. Depending on the plugin, settings can be optional or mandatory. For example the Whitelist and Blacklist policies require definitions.
To access the policy settings, click on the settings link below the toggle switch for the specific policy.
Prevents updates from downstream registries.
Prevents any changes to the registry contents. The registry will be read-only.
Disallows existing versions of a package to be overwritten by publish/push/pull.
Only allow packages scanned by the Vulnerability Scanner in a registry
Prevent packages flagged for known vulnerabilities to be added to any registry.
Allows only whitelisted packages and package versions to be added to a registry