Pinner
Secures software supply chains by pinning dependencies to immutable versions, resolving GitHub references to commit SHAs and Docke
Pinner-MCP is a Model Context Protocol server that helps pin dependencies to specific versions for enhanced security and reproducibility. It provides tools to resolve GitHub references to commit SHAs and Docker image tags to digests, enabling precise version pinning in GitHub Actions workflows and Dockerfiles. Built by SafeDep, this implementation focuses on supply chain security by ensuring that external dependencies are immutably referenced, preventing potential supply chain attacks through dependency substitution.
Source
Repository: https://github.com/safedep/pinner-mcp
Maintain Pinner?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[Pinner on getagentictools](https://getagentictools.com/mcp/safedep-pinner-mcp?ref=badge)