広告掲載
MCP.so
ログイン

Pinner MCP Server

@safedep

リポジトリ

基本情報

カテゴリ

その他

ライセンス

Apache-2.0

トランスポート

stdio

作者

safedep

Pinner MCP Server について

Model Context Protocol (MCP) server to pin components to their immutable version

Pinner MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "pinner-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-it",
        "--rm",
        "ghcr.io/safedep/pinner-mcp:latest"
      ]
    }
  }
}

Pinner MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Pinner MCP 📍?

Pinner MCP 📍 is a Model Context Protocol (MCP) server for pinning third‑party dependencies to immutable digests. It supports Docker base images and GitHub Actions and is aimed at developers and security engineers who want to enforce dependency integrity in CI/CD pipelines. The server was originally built to protect the vet tool from malicious GitHub Actions.

How to use Pinner MCP 📍?

Run the server as a container with stdio transport: docker run -it --rm ghcr.io/safedep/pinner-mcp:latest. Configure it in VS Code (.vscode/mcp.json) or Cursor (.cursor/mcp.json) using the same Docker command. Then use prompts such as “Pin GitHub Actions to their commit hash” or “Pin container base images to digests” via GitHub Copilot Chat or Cursor Composer to pin or update pinned versions.

Key features of Pinner MCP 📍?

  • Pins Docker base images to immutable digests.
  • Pins GitHub Actions to commit hashes.
  • Runs as a lightweight container with stdio transport.
  • Integrates with VS Code and Cursor via MCP configuration.
  • Supports updating pinned versions with natural language prompts.
  • Automatically published as latest image on GitHub Container Registry.

Use cases of Pinner MCP 📍?

  • Locking CI/CD pipeline dependencies to prevent supply‑chain attacks.
  • Enforcing reproducible builds by pinning container base images.
  • Auditing and fixing GitHub Actions versions in repository workflows.
  • Updating all pinned dependencies in a project with a single prompt.

よくある質問

1

What dependency types does Pinner MCP 📍 support?

It supports Docker base images and GitHub Actions.

2

How do I run Pinner MCP 📍?

Run the container image with `docker run -it --rm ghcr.io/safedep/pinner-mcp:latest` using stdio transport.

3

How do I configure Pinner MCP 📍 in VS Code or Cursor?

Add an entry to your `.vscode/mcp.json` or `.cursor/mcp.json` file with the Docker command as shown in the README, and ensure GitHub Copilot or MCP is enabled.

コメント

「その他」の他のコンテンツ

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

Health by Dr Brad

Dr Brad Stanfield

Health by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

MaxKB

1Panel-dev

🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。

22.0K
広告掲載