Pinner

Pins GitHub Actions and Docker base images to immutable digests via an MCP server for reproducible builds.

other

12

GitHub Stars

other

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "safedep-pinner-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/safedep/pinner-mcp:latest"
      ]
    }
  }
}

Pinner MCP is an MCP server that pins third-party dependencies, such as GitHub Actions and Docker base images, to immutable digests. It helps you lock critical dependencies to their verified digests, reducing drift and improving reproducibility across your CI and deployment workflows.

How to use

Set up and run the MCP server as a standard input/output (stdio) MCP server. You can connect via editors or tools that support MCP stdio servers and issue prompts to pin dependencies. The server pins GitHub Actions to their commit hashes and Docker base images to their corresponding digests, and you can request updates for pinned versions.

How to install

Prerequisites: you need Docker installed on your machine to run the MCP server container.

Run the MCP server container in interactive mode and remove it when you exit.

docker run -it --rm ghcr.io/safedep/pinner-mcp:latest

Configuration and usage examples

Configure your development environment to connect to the MCP server as an stdio endpoint. The following example shows how to wire up the MCP server in your editor settings.

{
  "servers": {
    "pinner-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": ["run", "--rm", "-i", "ghcr.io/safedep/pinner-mcp:latest"]
    }
  }
}

Notes on usage prompts

Use prompts to perform actions such as pinning dependencies or updating pins. Example prompts include pinning GitHub Actions to their commit hash and pinning container base images to digests. To refresh pins, request an update of pinned versions.

Security and maintenance

Keep the MCP server image updated to receive the latest pins and security fixes. Regularly pull the latest image and restart your editor connections after updates.

Available tools

Pin GitHub Actions

Pins GitHub Actions to their commit hashes to ensure specific, immutable action versions are used.

Pin container base images

Pins Docker base images to their digests to prevent drift and ensure reproducible builds.

Update pins

Updates pinned versions of container base images or actions when needed using prompts.