An MCP server for pinning GitHub Actions and container base images to their immutable SHA hashes to prevent supply chain attacks.