Description:

This project wants to build an MCP server that connects your LLM to your private registry. It fetches vulnerability reports, probably generated by Trivy, with all the CVEs, and uses the LLM to develop the exact terminal commands or containers updates needed to resolve them.

Goals:

Our goal is to build an MCP for private registries that:

• Detects Vulnerabilities: Proactively finds risks in your packages.

• Automates Security: Keeps software secure with automated checks and updates.

• Fits Your Workflow: Integrates seamlessly so you never leave your tools.

• Protects Privacy: Delivers actionable insights without compromising private data.

To provide automated, privacy-first security for private packages that deliver actionable risk alerts directly within the developer’s existing workflow.

Resources:

• https://github.com/goharbor/harbor
• https://modelcontextprotocol.io/docs/getting-started/intro