Skip to main content
We are excited to introduce the latest features and enhancements in Endor Labs.

​
Sonatype Nexus Repository support for Package Firewall

New You can now route package installations for npm, PyPI, Go, and Maven through the Package Firewall using Sonatype Nexus Repository. Configure a proxy repository with the Package Firewall URL as its remote storage. Every request is then checked against the Endor Labs malware database and your Package Firewall policy before the package reaches your environment. For more information, see Configure the Package Firewall with Sonatype Nexus Repository.

​
Allow safe versions in Package Firewall

New You can now configure Package Firewall to install a safe version automatically instead of blocking the request, when a package is flagged for malware or doesn’t meet the minimum package age. Select Allow safe versions only (curate) for these conditions so the package manager resolves and installs a safe version instead of failing — developers get a working install without seeing a block. This action is available for the npm and PyPI ecosystems. For more information, see Allow safe versions.

​
Call graph support for Ruby

New Endor Labs now generates call graphs and performs reachability analysis for Ruby projects. To enable call graph generation, set the ENDOR_SCAN_RUBY_CALL_GRAPH environment variable to true, and then view call paths to trace how a vulnerable method in a dependency gets invoked from your code. For more information, see Ruby call graphs.

​
Block Azure DevOps merges on PR scan findings

Enhancement You can now block pull requests from merging in Azure DevOps when a PR scan detects findings that match an action policy. Configure an action policy that breaks the build to choose which findings gate a merge, and an Azure DevOps branch policy that requires the Endor Labs status check. This ensures that the findings your action policy targets are resolved before code reaches your default branch. For more information, see Block pull requests on findings.

​
OpenCode support for the MCP server

Enhancement The Endor Labs MCP server now supports OpenCode, so you can scan dependencies, detect vulnerabilities, find leaked secrets, and review code for security issues directly inside OpenCode. For more information, see Endor Labs MCP server in OpenCode.