Pins third-party dependencies to immutable digests using the Model Context Protocol.
Sponsored
Pinner is a Model Context Protocol (MCP) server designed to enhance software supply chain security by pinning third-party dependencies, such as Docker base images and GitHub Actions, to their immutable digests. This ensures that projects consistently use specific, verified versions of dependencies, mitigating the risk of supply chain attacks and unexpected changes. It integrates with tools like Cursor to automate the pinning process, making it easier to maintain secure and reproducible builds.
Key Features
01Uses stdio transport for easy containerization
02Pins Docker base images to immutable digests
03Pins GitHub Actions to commit hashes
04Integrates with Cursor IDE via MCP
05Automatically updates with the latest security patches and features via GitHub Container Registry
065 GitHub stars
Use Cases
01Securing software supply chains by ensuring consistent dependency versions
02Preventing malicious code injection through dependency pinning
03Automating dependency version management in development workflows
