Pinner-MCP is a Model Context Protocol server that helps pin dependencies to specific versions for enhanced security and reproducibility. It provides tools to resolve GitHub references to commit SHAs and Docker image tags to digests, enabling precise version pinning in GitHub Actions workflows and Dockerfiles. Built by SafeDep, this implementation focuses on supply chain security by ensuring that external dependencies are immutably referenced, preventing potential supply chain attacks through dependency substitution.
Cognium trust score
99%
Tier
Verified
Composite of vulnerability cleanliness, spec conformance, provenance, stability, and usage signals — scanned and weighted by Cognium. Human and agent signals are tracked separately.
Last scanned 2026-09-28.
Returns 7 tools: search_skills, get_skill, list_leaderboard, get_trust_breakdown, resolve_composition, plus the ChatGPT-connector search and fetch. Every tool is annotated read-only.
Resolve this skill directly via MCP tools/call get_skill.