Allowlist only certain gems to cache

I'm trying to mitigate supply chain attacks by only allowing developers to install gems from an approved list. Ideally I'd like to only permit downloading gems from my gemstash server and then have an allowlist/whitelist of gems on the gemstash server that specify which gems the server will download and the rest will be blocked. Does that functionality exist? 