What: Organizations can now restrict which external marketplaces users can install via the strictKnownMarketplaces policy setting.
How it works:
- Administrators set allowed marketplace sources in enterprise policy settings
- When users attempt to install a marketplace, the source is validated against the allowlist
- Blocked sources show clear error messages indicating the policy restriction
Details:
- Supports multiple source types: GitHub repos, URLs, git repos, npm packages, file paths, and directories
- Clear error messaging:
"Marketplace source 'X' is blocked by enterprise policy. Allowed sources: ..." - Evidence:
pEA()at line ~164954,apA()at line ~164985,So()at line ~165393 in v2.0.55