sap-dependency-security

name	sap-dependency-security
description	SAP dependency security — MCP executable trust verification, supply-chain safeguards, cooldown policies for sensitive operations, lockfile hardening, npm/pip dependency audit, SAP security note tracking. Use when auditing project dependencies, verifying MCP server executables, or implementing supply-chain security policies for SAP tools.
trigger	{"keywords":["dependency security SAP","MCP executable trust","npm audit SAP","pip audit","supply chain security","SAP security notes","lockfile hardening"],"intent":"User needs to audit, verify, or harden dependencies and executables in an SAP development environment."}

SAP Dependency Security

Supply-chain security for SAP development tooling and MCP servers.

Prerequisites

• npm and/or pip available in the project environment
• sha256sum utility (standard on Linux/macOS)
• Access to SAP support portal for security notes (S-user)
• Project under version control (Git)

1. Verify MCP Executable Signatures

# Generate checksum of the downloaded MCP executable
sha256sum aibap-mcp > checksum.txt

# Compare against the published checksum from the repo releases page
# If they differ → do NOT run the executable
diff <(echo "<published-sha256>  aibap-mcp") checksum.txt

# First run in sandbox — read-only, no network writes
./aibap-mcp --dry-run --read-only 2>&1 | tee first-run.log


grep -iE  first-run.log