kevinb2222

Docker Sandboxes provide secret injection using a network proxy outside the VM so the agent never has direct access to the secret: https://docs.docker.com/ai/sandboxes/security/

Note: I work at Docker

Docker Inc, Remote (62 positions available) We are rapidly expanding to help developers securely use agentic AI to increase their productivity. We are hiring engineers, data scientist, program manager, product managers, solutions engineers, solutions architects, account executives

Details and apply: https://www.docker.com/career-openings/

Hardened base images don't restrict what you add on top of them. That's where scanners like Docker Scout, Trivy, Grype, and more come in to review the complete image that you have built.

Docker Hardened Images are built from scratch with the minimal packages to run the image. The hardened images didn't contain any compromised packages for Shai-Hulud.

https://www.docker.com/blog/security-that-moves-fast-dockers...

Note: I work at Docker