safedep_pinner_mcp

safedep_pinner_mcp

by safedep
A Model Context Protocol (MCP) server that pins 3rd party dependencies like Docker images and GitHub Actions to immutable versions.

Pinner MCP Server for Dependency Immutability

Overview

Pinner MCP is a Model Context Protocol (MCP) server designed to pin third-party dependencies to their immutable versions. It supports various dependency types, including:

  • Docker base images
  • GitHub Actions

Pinner MCP Demo

Usage

Run Pinner MCP as a container with stdio transport:

docker run -it --rm ghcr.io/safedep/pinner-mcp:latest

Cursor Integration

To integrate Pinner MCP with Cursor, add the following to your .cursor/mcp.json file:

{
  "mcpServers": {
    "pinner-mcp-stdio-server": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/safedep/pinner-mcp:latest"
      ]
    }
  }
}

Use prompts like the following to pin specific commit hashes or update pinned versions:

  • Pin GitHub Actions to their commit hash
  • Pin container base images to digests
  • Update pinned versions of container base images

Tool Updates

Updates for the MCP server are automatically pushed to the latest tag on GitHub Container Registry. To update your local container image:

docker pull ghcr.io/safedep/pinner-mcp:latest

References

  • Originally built to protect vet from malicious GitHub Actions
  • mcp-go is a great library for building MCP servers
  • Built and maintained by SafeDep Engineering

About

Pinner MCP is a Model Context Protocol (MCP) server designed to pin components to their immutable versions.

Resources

License

Apache-2.0 license

Code of Conduct

Code of conduct

Security Policy

Security policy

Activity

Languages

Features & Capabilities

Categories
mcp_server model_context_protocol go docker api_integration dependency_management github_actions

Implementation Details

View on GitHub

Stats

0 Views
5 GitHub Stars

Repository Info

safedep Organization

Similar MCP Servers

continuedev_continue by continuedev
25049
cherryhq_cherry_studio by CherryHQ
21423
bytedance_ui_tars_desktop by bytedance
9300
2025© BestAI