safedep-pinner
Secures software supply chains by pinning dependencies to immutable versions, resolving GitHub references to commit SHAs and Docker image tags to digests to prevent dependency substitution attacks.
- Score
- 71.0772 signals
- Evidence
- 13 stars · 4 forks
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · MCPs
- praetorian-mcphammer35 stars · 2 forks76.838
- agentaudit3 stars38.412
- securechaindev-secure-chain2 stars32.223
What it is
MCP server Pinner, catalogued on PulseMCP. Secures software supply chains by pinning dependencies to immutable versions, resolving GitHub references to commit SHAs and Docker image tags to digests to prevent dependency substitution attacks.
When to use it
Secures software supply chains by pinning dependencies to immutable versions, resolving GitHub references to commit SHAs and Docker image tags to digests to prevent dependency substitution attacks.
Notes
Listed from the PulseMCP registry. The registry does not state a license. Check it before production use.