Docker

Docker: Conquer the complexity of app development.

[Docker @Docker]

Kristiyan Velkov is speaking at WeAreDevelopers North America, co-hosted by Docker!

Why container isolation breaks down for AI agents, and how Docker Sandboxes gives agents full autonomy inside a microVM while keeping your host untouched.

Sept 23-25, San Jose.

Details: https://t.co/qbWFNi0Wf2

[Docker @Docker]

WeAreDevelopers Day comes to San Francisco on August 24 - a community warmup ahead of @WeAreDevs World Congress North America (co-hosted by Docker!) in San José.

Come meet the people you'll see at the Congress. Free tickets dropping on the day:

Tickets: https://t.co/HL7XawHtTz

[Docker @Docker]

When you spin up a fresh agent environment, how long does setup take?

[Docker @Docker]

When software is selected at machine speed, the question is no longer "is this popular?" It's "do we know who published this?"

Docker Verified Publisher is now self-serve on Docker Hub.

One badge, one trust signal across images, MCP servers, models, and agents.

Read more: https://t.co/36UsoO2Edk

[Docker @Docker]

@karanvrm19 Blog 3 - Governance is a Developer Experience Problem: https://t.co/sgnrH4i50w

[Docker @Docker]

A prompt can influence agent behavior. A runtime can restrict it.

Docker Captain @karanvrm19's 3-part series on AI governance in the agent era covers where agents execute, what boundaries actually matter, and why governance enables adoption rather than slowing it.

Links in comments:

[Docker @Docker]

@karanvrm19 Blog 2 - Runtime Enforcement Not Runtime Advice: https://t.co/ylfG87KEMx

[Docker @Docker]

@karanvrm19 Blog 1 - Your Laptop is the New Production Environment: https://t.co/4z1bwjw613

[Docker @Docker]

One week left to get into the Agent Hall of Shame.

The bar is high. If your agent has ever gone completely off-script in a way you still can't explain, this is your moment.

Best story wins a free ticket to @WeAreDevs (Sept. 23-25, San Jose)!

Enter here: https://t.co/I5g0N1qayx

[Docker @Docker]

Do you have visibility into which MCP servers your devs are connecting agents to?

@zachlloydtweets (@warpdotdev) says the real risk isn't the protocol. It's every dev setting up their own tool dependencies with no central oversight:

CISO panel episode on governed tool access: https://t.co/3tCbldvPG1

[Docker @Docker]

The dev approved the git branch. The check found nothing wrong. The attack worked anyway.

Part 5 of @ajeetsraina's AI Coding Agent Horror Stories series: how a two-line injection slipped past an allowlist that was working exactly as designed:

https://t.co/HqJxbbF9ob

[Docker @Docker]

Docker Sandboxes is now in the official @AnthropicAI Claude Code docs as a recommended way to run Claude Code with microVM-level isolation.

Its own kernel, its own Docker daemon, no Docker Desktop required: https://t.co/dehQVwcRSJ

[Docker @Docker]

Hugging Face reconstructed approximately 17,600 attacker actions by OpenAI agents across a four-and-a-half-day campaign in July.

After weeks of customer conversations, Docker’s Mark Cavage breaks down what happened, what it means, and what it will take to build security at agent speed.

Read more: https://t.co/ykVxGZBP7g

[Docker @Docker]

New leadership at Docker: @matvelloso joins as Chief Product Officer and Vinh Le as CFO.

Both bring deep AI product knowledge and leadership experience as we double down on the agentic era.

Welcome aboard!

Read more: https://t.co/OgaVzTQqfg

[Docker @Docker]

With the latest update, Docker Hardened Images (DHI) now offers 65,000+ hardened system packages across Alpine and now Debian too.

Each package is built from source by Docker, so a single patch at the source flows into every image built on it.

https://t.co/3DfNQy2jc8

[Docker @Docker]

90 to 97% fewer CVEs across Ruby and Node builds.

Tremendous paired Docker Hardened Images with @SocketSecurity to secure both layers of its supply chain, base image and dependencies. POC running in week one.

Read more: https://t.co/swF9hHxgDg

[Docker @Docker]

Still installing ESP-IDF directly on your host? You're working harder than necessary.

Docker Captain Marco Franzon on reproducible ESP32 builds and letting AI agents work on firmware safely with Docker Sandboxes: https://t.co/hI0d7XNZHt

[Docker @Docker]

Introducing the Agent Hall of Shame.

What's the most unhinged thing your coding agent has done?

Best story wins a free ticket to @WeAreDevs North America (Sept 23-25, San Jose)! 500+ sessions, the brightest minds in dev, all in one place.

Enter your story here:

https://t.co/RT1apNfDd3

[Docker @Docker]

Docker Model Runner now supports ModelPack format, the open standard from the CNCF ModelPack project.

In a recent member post on the @CloudNativeFdn blog, @sabre1041 from @RedHat covers what changed and what it means for model portability: https://t.co/abwMx6GgY4

[Docker @Docker]

The Docker VMM public beta landed a few days ago and it's already in @tldrnewsletter DevOps.

A fully rebuilt, first-party virtualization layer with faster startup and better performance across the board.

Here's what TLDR had to say: https://t.co/ICbQhivJp1