Docker

Modern dev teams don’t just use agents, they build teams of them. In this Docker AI Labs newsletter: behind the scenes of how the Sandboxes team built a fleet of agents to test, triage, and fix code in CI, all running in the same sandbox model locally and in CI → bit.ly/3QHZcTA

Ever had a deploy blocked by CVEs in packages your app doesn’t even use? This blog walks through a real case with a @ClickHouseDB deploy, why scanners flag it, and how removing unused packages changes the security conversation. Go from blocked to prod-ready → bit.ly/3OTb0BS

What does it take to run @huggingface Spaces on Arm64? With Arm64 powering modern dev machines and 1M+ Hugging Face Spaces out there, compatibility matters. This session shows how to spot hidden x86 dependencies and fix them quickly with MCP tools. Watch → bit.ly/4sFY1Bj

Hardened images are great, but to truly make them your own, you need to add back in certs, tools, perms, and more. Customize Docker Hardened Images once, and SLSA Level 3 provenance, attestations, and SLA get applied automatically, with every patch! Full video: bit.ly/3QRTSgk

At @DeepLearningAI's AI Dev today, @tusharjain's talk is packed! A room full of builders focused on moving from AI demos to real systems. Tushar’s talk breaks down what it takes to run agents for real - runtime, isolation, and trust. If you’re here, find us after at Booth #11!

Last day to submit your talk to @WeAreDevs World Congress! With Docker as Presenting Partner, this is a builder-focused event centered on real workflows. Share your work - get feedback & connections to 10K+ devs solving the same problems. Submit here: bit.ly/4tgT82F

What happens when an AI agent runs in “YOLO mode”? Watch a live demo with Docker's @Kiview using a vulnerable Java app + GitHub Copilot to see how Docker Sandbox isolates risk and prevents credential leaks in real time. 📅 Apr 30, 11AM PST • Free virtual Join → bit.ly/4vYZq8X

What actually breaks software delivery at scale? Per Krogslund talks with @harnessio Field CTO Jignesh Patel about CI/CD spaghetti maps, AI speeding up chaos, and why DevOps strategy still starts with people, process, then tech. Watch → bit.ly/3QNntHJ

Trying to run AI agents beyond demos and into real workflows? This Docker Navigator issue shows how teams make it work - isolating agents in microVMs, turning local models into pipelines, running Docker in locked-down envs, and improving supply chain security. Read → bit.ly/4tRPb4q

This is an unfortunate reminder that agents are powerful enough now that the question isn’t what they can do, it’s what we let them do. Some lessons: 1) agents need hard boundaries, and 2) these boundaries need to be enforced by infrastructure not the agent itself.

WeAreDevelopers World Congress is shaping up to be a major moment for developers. With Docker as Presenting Partner & Co-Host, it’s a builders-first event focused on real workflows, live builds, and how teams actually ship AI systems at scale. San Jose, Sept 23-25 Tickets to @wearedevs → bit.ly/4e7b7nD

What happens when you actually try to break Docker Sandboxes? Engineering manager at @reevo_cloud, @IamMatteoBisi does a hands-on stress test - digging into isolation boundaries, credential handling & more under real conditions. Read → bit.ly/3QLGwlL

1 week left to submit your talk to @WeAreDevs World Congress! With Docker as Presenting Partner, this is a builder-focused event centered on real workflows. Building with AI, or real systems at scale? Share it Sept 23-25 in San Jose, with 10K+ devs. Submit: bit.ly/4tgT82F

We recently caught a malicious image pushed to Checkmarx/KICS on Docker Hub using stolen creds. We coordinated a response with @SocketSecurity and @Checkmarx. Read more on what happened, and why fast, open collaboration is the only way to shorten these windows → bit.ly/4mK4xWe

@d4m1n Thank YOU for such a great dive into it! 🙌

@Docker thanks for building this awesome tool for us!! 🙌

How do you give AI agents freedom without losing control? @d4m1n (from the MorningMakerShow) demos Docker Sandboxes: getting started fast, & what safely “unattended” looks like in your codebase. A humorous & helpful breakdown for anyone looking to improve their AI agent process: bit.ly/4mFRAwR

Docker is joining AI Dev this year in San Francisco! Don’t miss @tusharjain: Shipping Agents Safely: Boundaries That Actually Work. Runtime boundaries, isolation, secure creds, recovery-first design. April 29 • 10:30 AM More: bit.ly/4dCdyOJ

Developer growth is not just about what you learn, but how you think. Docker Captain @FrancescoCiull4 chats with Per Krogslund about the skills that actually matter for developers today, and why they go beyond just learning the next tool. What’s a skill that’s paid off most in your career? Watch bit.ly/4mIyA0H

Docker will be at @DevoxxFR, April 22 to 24. Find us at Stand C11 to see Docker Hardened Images and AI governance in action. Learn how teams are working to run software securely and responsibly in an AI-driven world.

Secure images are top of mind, and much of the industry is taking the easier path - proprietary distros, incomplete SBOMs, and clean scans that miss the full picture. A year into Docker Hardened Images, here’s why a different approach matters: bit.ly/4etQ52A