THREAT OPS › Threat News › What Is a Dependency Firewall?
What Is a Dependency Firewall?
<p><span style="font-weight: 400;">By Nicholas Thomson, Aikido Security</span></p> <p><span style="font-weight: 400;">A dependency firewall is a security checkpoint that evaluates open source packages before they are installed. It can protect developer workstations, build environments, CI/CD pipelines, and AI coding agents by blocking packages that appear malicious, suspicious, or inconsistent wit
MITRE ATT&CK techniques
- IDE ExtensionsT1176.002
- Code RepositoriesT1593.003
- Multi-Factor AuthenticationT1556.006
- CredentialsT1589.001
- Code RepositoriesT1213.003
- Invisible UnicodeT1027.018
- Malicious PackageAML.T0011.001
- Code RepositoriesAML.T0095.000
Indicators of compromise
- https://www.aikido.dev/blog/what-is-a-dependency-firewallurl
Original source: https://openssf.org/blog/2026/07/28/what-is-a-dependency-firewall/