MCP For Claude Marketplace
CI/CD Pipeline Config Validator

CI/CD Pipeline Config Validator MCP Connector for Claude

A+

Deterministic validator for GitHub Actions and GitLab CI configuration files.

4 tools Official Updated Oct 1, 2026 Official Vinkius Partner
More Details Connect to Claude

Ensure the structural integrity, security, and execution safety of your CI/CD pipelines. This MCP server provides specialized tools like check_structure to verify required keys, validate_references to enforce immutable SHA256 hashes for actions and images, and audit_safety to detect unbounded timeouts or missing error handling in shell scripts. Use generate_compliance_report for a comprehensive audit of your YAML configurations.

github-actionsgitlab-ciyamlpipeline-securitydevops-toolscompliance

4 tools expose this connector's capabilities to your AI agent.

audit_safety

Audit the pipeline for execution safety risks

check_structure

Check the structural integrity of a CI/CD pipeline config

generate_compliance_report

Generate a full compliance report for a pipeline

validate_references

Validate that external references use immutable sha256 hashes

See how to talk to your AI agent using CI/CD Pipeline Config Validator.

Is my GitHub Actions workflow structurally sound?

The structural check for your configuration is complete. All required keys like 'on' and 'jobs' are present.

Check if my GitLab CI file has any security risks in its references.

The reference scan identified 1 invalid reference: 'docker.io/library/alpine:latest'. Please use a SHA256 hash instead.

Audit my pipeline for execution safety risks.

The audit found 1 violation: Unbounded timeout detected in job 'build'. Please specify 'timeout-minutes'.

The validator supports GITHUB_ACTIONS and GITLAB_CI configurations.

Related Connectors

Code Integrity Prover

Code Integrity Prover MCP

1 tools Official

AI agents default to type evasion (like any, void*, unsafe, or ignore), TODO stubs, timing/sleep hacks, and empty catch blocks. 96% of developers don't trust AI-generated code. This tool enforces zero-workaround integrity across all programming languages.

A+ View details →
Google Deps.dev Security Hacker

Google Deps.dev Security Hacker MCP

4 tools Official

Transform your AI into a Senior DevSecOps Engineer. Instantly audit any open-source package, hunt for hidden supply-chain threats in dependency trees, and analyze full GitHub repositories using Google's deps.dev API. No authentication required.

A+ View details →
Pipeline Integrity Management

Pipeline Integrity Management MCP

4 tools Official

Plan and manage pipeline integrity programs using risk-based methodologies.

A+ View details →
Codefresh

Codefresh MCP

8 tools Official

Manage CI/CD and GitOps via Codefresh — track pipelines, trigger builds, and monitor delivery clusters directly from any AI agent.

A+ View details →