Docker

Today we're introducing Cloud Sandboxes: same microVM isolation as Docker Sandboxes on your laptop, same CLI, always-on Docker-managed compute.

Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts: docker.com/sbx-promo

Every story in this series has been about an agent reaching too far. This one never reached at all.

It was a code-review bot,read-only by design. It stayed inside its boundary the entire time. And it still produced a fake security report that would have caused a real outage.

Part 6 of our AI Coding Agent Horror Stories series: bit.ly/4sMvoEd

Docker’s trusted foundation, paired with @ActiveState, now spans the base image and the open source libraries on top, all secure by default.

Read more: bit.ly/4BINBqg

The Score maintainers documented improving their security posture through the Docker-Sponsored Open Source Program, with CVE counts, package changes, and image size diffs at each step.

The full implementation is tracked in a GitHub issue so other projects can follow the same path:
bit.ly/4AdWLtl

Docker sessions at @KubeCon_ next week:

- Tue Nov 10 11:30am: @realjohnkjell + @datosh18 (@controlplaneio) on the real consequences of AI-generated vulnerabilities

- Wed Nov 11 3:10pm: Per Krogslund - what makes an agent reproducible?

- Thu Nov 12 11am: @mikesir87 - trusted environments for AI agents

See you there.