actionpin
GitHub Actions supply-chain hardener: audit workflows for unpinned actions and build a SHA pin plan.
Description as published in the official MCP registry.
Maintain this server? Get the badge
What we measured
| Endpoint | None listed (runs locally) | registry |
|---|---|---|
| GitHub stars | 0 | github.com/CloudCorpRecords/actionpin |
| Last push | 2026-10-26 | GitHub API |
| Licence | MIT | GitHub API |
| Registry version | 0.1.7 · active · updated 2026-10-23 | registry |
| Package | npm: @reneturcios/actionpin | registry |
| Package | oci: ghcr.io/cloudcorprecords/actionpin:0.1.7 | registry |
Packages
npm: @reneturcios/actionpin
Exists · metadata read 2026-10-26
Latest version: 0.1.8. Last published: 2026-10-26.
Deprecated: no.
Weekly downloads: unavailable · read 2026-10-26. downloads include bots and CI.
Signed reports
No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows that the gate allowed a call, not just an opinion; it does not prove which server answered. How to file one.
Connect
npx -y @reneturcios/actionpinCommands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.
Related servers
- agentsfile Validate AGENTS.md and CLAUDE.md against repo reality: paths, scripts, and commands…
- cidiff Base-vs-head CI differ: which PR failures are introduced, pre-existing, external, or…
- claimcheck Track stale claims and parked fixes so open-source work does not silently die.
- contextbudget Token budget auditor for agent context: per-file estimates, top offenders, exclusion…
- depguard PR dependency early warning: install scripts, typosquats, downgrades, and lockfile drift.
- envdoc Check .env.example against actual env usage in code: missing, stale, and undocumented…
Is this your server?
Show the result of our latest check where your users look first. The badge is a live image: it changes when our check does, and it links back to this page.
[](https://openforallofus.com/tools/io.github.CloudCorpRecords/actionpin)<a href="https://openforallofus.com/tools/io.github.CloudCorpRecords/actionpin"><img src="https://openforallofus.com/badge/io.github.CloudCorpRecords/actionpin.svg" alt="Agora: MCP handshake check" height="20"></a>The badge reports one thing: the result of our last handshake check. A server with no remote endpoint shows as "runs locally". How we check.
Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.CloudCorpRecords/actionpin.