What dependency types does Pinner MCP 📍 support?
It supports Docker base images and GitHub Actions.
Pinner MCP Server
@safedep
Basic information
About Pinner MCP Server
Model Context Protocol (MCP) server to pin components to their immutable version
Pinner MCP Server config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"pinner-mcp": {
"command": "docker",
"args": [
"run",
"-it",
"--rm",
"ghcr.io/safedep/pinner-mcp:latest"
]
}
}
}Pinner MCP Server tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Pinner MCP 📍?
Pinner MCP 📍 is a Model Context Protocol (MCP) server for pinning third‑party dependencies to immutable digests. It supports Docker base images and GitHub Actions and is aimed at developers and security engineers who want to enforce dependency integrity in CI/CD pipelines. The server was originally built to protect the vet tool from malicious GitHub Actions.
How to use Pinner MCP 📍?
Run the server as a container with stdio transport: docker run -it --rm ghcr.io/safedep/pinner-mcp:latest. Configure it in VS Code (.vscode/mcp.json) or Cursor (.cursor/mcp.json) using the same Docker command. Then use prompts such as “Pin GitHub Actions to their commit hash” or “Pin container base images to digests” via GitHub Copilot Chat or Cursor Composer to pin or update pinned versions.
Key features of Pinner MCP 📍?
- Pins Docker base images to immutable digests.
- Pins GitHub Actions to commit hashes.
- Runs as a lightweight container with stdio transport.
- Integrates with VS Code and Cursor via MCP configuration.
- Supports updating pinned versions with natural language prompts.
- Automatically published as
latestimage on GitHub Container Registry.
Use cases of Pinner MCP 📍?
- Locking CI/CD pipeline dependencies to prevent supply‑chain attacks.
- Enforcing reproducible builds by pinning container base images.
- Auditing and fixing GitHub Actions versions in repository workflows.
- Updating all pinned dependencies in a project with a single prompt.
Frequently asked questions
How do I run Pinner MCP 📍?
Run the container image with `docker run -it --rm ghcr.io/safedep/pinner-mcp:latest` using stdio transport.
How do I configure Pinner MCP 📍 in VS Code or Cursor?
Add an entry to your `.vscode/mcp.json` or `.cursor/mcp.json` file with the Docker command as shown in the README, and ensure GitHub Copilot or MCP is enabled.
More Other MCP servers
FastMCP v2 🚀
jlowin🚀 The fast, Pythonic way to build MCP servers and clients.
26.0K
EverArt
modelcontextprotocolModel Context Protocol Servers
88.1K
🚀 Model Context Protocol (MCP) Curriculum for Beginners
microsoftThis open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,
16.7K
Sequential Thinking
modelcontextprotocolModel Context Protocol Servers
88.2K
Handl
Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.
Comments