by safedep
Pinner MCP is a Model Context Protocol (MCP) server designed to enhance supply chain security by pinning third-party dependencies like GitHub Actions and Docker base images to their immutable versions.
Pinner MCP is a Model Context Protocol (MCP) server that helps to pin third-party dependencies, specifically GitHub Actions and Docker base images, to their immutable SHA hashes or digests. This process prevents supply chain attacks by ensuring that the exact, verified versions of these dependencies are always used.
Pinner MCP can be run as a container. Users can integrate it with tools like Cursor by adding specific configurations to their .cursor/mcp.json
file. Once configured, users can leverage Composer prompts to pin GitHub Actions to commit hashes or container base images to digests. To update pinned versions, specific prompts can also be used.
latest
tag on GitHub Container Registry. You need to manually pull the latest Docker image to update your local container: docker pull ghcr.io/safedep/pinner-mcp:latest
..cursor/mcp.json
file and using Composer prompts for pinning and updating dependencies.A Model Context Protocol (MCP) server that can help pin 3rd party dependencies to immutable digests. Supported dependency types include:
Run as a container with stdio
transport.
docker run -it --rm ghcr.io/safedep/pinner-mcp:latest
Add the following to your .cursor/mcp.json
file. You must enable
the MCP server in the settings. Learn more here.
{
"mcpServers": {
"pinner-mcp-stdio-server": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ghcr.io/safedep/pinner-mcp:latest"
]
}
}
}
Use a Composer prompt like the following to pin a specific commit hash.
Pin GitHub Actions to their commit hash
Pin container base images to digests
To update pinned versions, you can use a prompt like the following.
Update pinned versions of container base images
Updates for the MCP server are automatically pushed to the latest
tag on
GitHub Container Registry. You
must manually update your local container image to the latest version.
docker pull ghcr.io/safedep/pinner-mcp:latest
Please log in to share your review and rating for this MCP.
Discover more MCP servers with similar functionality and use cases
by chaitin
Provides a self‑hosted web application firewall and reverse‑proxy that filters, monitors, and blocks malicious HTTP/S traffic, protecting web applications from attacks such as SQL injection, XSS, brute‑force, bot abuse, and various code injections.
by PortSwigger
Integrates Burp Suite with AI clients via the Model Context Protocol, providing a built‑in SSE server and a packaged Stdio proxy for seamless AI‑driven interaction with Burp.
by cycodehq
Boost security in the development lifecycle via static application security testing, software composition analysis, secrets detection, and infrastructure‑as‑code scanning.
by auth0
Auth0 MCP Server enables AI agents to manage Auth0 tenants using natural language, streamlining tasks like application and user management.
by ChristophEnglisch
keycloak-model-context-protocol is an MCP server implementation for Keycloak user management, enabling AI-powered administration of Keycloak users and realms through the Model Context Protocol (MCP).
by Spathodea-Network
OpenCTI MCP Server is a Model Context Protocol (MCP) server that provides seamless integration with the OpenCTI (Open Cyber Threat Intelligence) platform, enabling querying and retrieving threat intelligence data through a standardized interface.
by mytechnotalent
Provides real-time threat intelligence and detailed malware sample metadata from Malware Bazaar through an AI‑driven MCP server, enabling authorized cybersecurity research workflows.
by kapilduraphe
This project provides an Okta MCP (Multi-Cloud Platform) server that enables Claude to interact with Okta's user management system, offering comprehensive user and group management capabilities along with onboarding automation.
by descope-sample-apps
descope-mcp-server-stdio is a Model Context Protocol (MCP) server that integrates Descope's Management APIs with applications like Claude Desktop. It enables users to manage user data and audit logs directly from their desktop environment.