Pins GitHub Actions and container base images to immutable SHA hashes to help prevent supply chain attacks.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add pinner -- docker run -it --rm ghcr.io/safedep/pinner-mcp:latest~/.codex/config.toml
[mcp_servers.pinner]
command = "docker"
args = ["run", "-it", "--rm", "ghcr.io/safedep/pinner-mcp:latest"]
# codex mcp add pinner -- docker run -it --rm ghcr.io/safedep/pinner-mcp:latest~/.cursor/mcp.json
{
"mcpServers": {
"pinner": {
"command": "docker",
"args": [
"run",
"-it",
"--rm",
"ghcr.io/safedep/pinner-mcp:latest"
]
}
}
}.vscode/mcp.json
{
"servers": {
"pinner": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-it",
"--rm",
"ghcr.io/safedep/pinner-mcp:latest"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"pinner": {
"command": "docker",
"args": [
"run",
"-it",
"--rm",
"ghcr.io/safedep/pinner-mcp:latest"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"pinner": {
"command": "docker",
"args": [
"run",
"-it",
"--rm",
"ghcr.io/safedep/pinner-mcp:latest"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"pinner": {
"command": "docker",
"args": [
"run",
"-it",
"--rm",
"ghcr.io/safedep/pinner-mcp:latest"
]
}
}
}