Ssdf Attestation Workflow Audit

A local stdio MCP server that packages 14 rules and four CISA attestation sections into a single workflow file for attestation workflow auditing.

What you can do

The input lists no tools, so capabilities come from the description and README only. The registry description says it bundles 14 rules and four CISA attestation sections into one workflow file. The README, however, describes a VS Code theme project, which does not match the attestation-audit name. No tool list, instructions or usage steps are provided, so what an assistant can actually do with it is unclear.

When to use it

Only worth considering if you specifically want CISA attestation workflow auditing driven from an assistant and are willing to verify what the package actually contains first. The conflicting README makes it hard to recommend for any concrete task.

Requirements

Runs as a local process over stdio, launched with npx from the npm package. No authentication, environment variables or headers are declared. Node.js and network access for the package download are implied by the npx launch.