ProGet helps teams identify vulnerabilities in open-source packages and container images and apply policies to control which dependencies can be used in their development environments. By combining vulnerability data with ProGet’s policies, teams can make consistent decisions about which dependencies are approved for use.

In this video, we demonstrate how to configure vulnerability scanning in ProGet and assess packages for security risks. We also show how to create blocking rules at both the feed and global level, preventing vulnerable or unassessed packages from being downloaded.

For more tutorials, product updates, and ProGet tips, be sure to subscribe to the Inedo YouTube channel for the latest videos from Inedo.