zanadir
mustachecase/zanadir
Find what a repository's CI is missing, and which security checks cannot fail the build.
- GitHub stars
- 181
- tools
- 3
- auth
- Secret needed
- transport
- STDIO
- env var
- 1
- last updated
- Nov 7, 2026
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
scanreturns the JSON report: the score, uncovered categories with suggested tools, and weakened controls with their verdicts.
returns the JSON report: the score, uncovered categories with suggested tools, and weakened controls with their verdicts.
No parameter schema in public metadata yet.
fixreturns ready-to-paste configuration for the gaps, and writes nothing.
returns ready-to-paste configuration for the gaps, and writes nothing.
No parameter schema in public metadata yet.
skillsreturns zanadir skills' JSON: the skills found and their problems.
returns zanadir skills' JSON: the skills found and their problems.
No parameter schema in public metadata yet.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageConfiguration
GITHUB_TOKENsecretOptional: a token for the repo argument, used only when the server is started with --repo-token
Readme
zanadir is an open-source CI/CD security tool. It reads a repository's pipeline, from GitHub Actions to GitLab CI, and reports which security and quality checks are missing, or wired so they cannot fail a build.
What it answers
Details
- Repository
- github.com/mustachecase/zanadir
- Website
- mustachecase.github.io
- Category
- Security & Pentesting
- Package
docker.io/mustachecase/zanadir:0.31.0- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
