[AW Top 10] 04 Pin MCP images and replace predictable tokens #66488

Priority 4/10 | 4 source issues | Impact 3/5 | Confidence 4/5 | Effort 2/5

One assignment, one coherent fix

Shared MCP configs use unpinned container images and package versions, the Jupyter server token is the predictable run identifier, and the Dockerfile base image is not digest-pinned.

Implementation scope

Pin the kreuzberg and skillz images, the agentdb, ruflo and fabric package versions, and the Dockerfile base image by digest, and replace the run-id Jupyter token with a generated secret. Confirm each finding against current code first.

Done when

• Shared MCP configs contain no unpinned images or package versions.
• The Jupyter token is generated or secret-backed instead of derived from the run identifier.

Why now

These are concrete supply-chain findings from several reports. Some may already be fixed, so each needs re-verification.

Unchanged AW sources close only after this summary is completed. Newer source activity and not-planned retirement do not trigger source closure. Assigned summaries are frozen; unassign to allow reclustering.

Generated by AW Essential Issue Clustering · copilot · auto · 82.7 AIC · ⌖ 21.8 AIC · ⊞ 8.9K · ◷