Pinner
Createdsafedep
Pins third-party dependencies to immutable digests using the Model Context Protocol.
About
Pinner is a Model Context Protocol (MCP) server designed to enhance software supply chain security by pinning third-party dependencies, such as Docker base images and GitHub Actions, to their immutable digests. This ensures that projects consistently use specific, verified versions of dependencies, mitigating the risk of supply chain attacks and unexpected changes. It integrates with tools like Cursor to automate the pinning process, making it easier to maintain secure and reproducible builds.
Key Features
- Uses stdio transport for easy containerization
- Pins Docker base images to immutable digests
- Pins GitHub Actions to commit hashes
- Integrates with Cursor IDE via MCP
- Automatically updates with the latest security patches and features via GitHub Container Registry
- 5 GitHub stars
Use Cases
- Securing software supply chains by ensuring consistent dependency versions
- Preventing malicious code injection through dependency pinning
- Automating dependency version management in development workflows