Docker, Inc

1 week left to submit your talk for WeAreDevelopers World Congress North America! If you’re building with AI or working through real systems at scale, this is your chance to share it in person with 10,000+ developers and industry leaders, on Sept 23 - 25 in San Jose, CA. This isn’t a traditional tech conference. With Docker as the presenting partner and co-host, this is a builder-focused event centered on real systems and workflows. As a speaker, you walk away with real feedback, new ideas, and connections with people solving the same problems. Submit your CFP → https://bit.ly/4tgT82F

Yesterday, our security team identified a malicious image pushed to the Checkmarx/KICS repository on Docker Hub using stolen publisher credentials. The repository was quickly quarantined, and we coordinated response efforts in real time with Socket and Checkmarx. This follows a similar incident with Trivy and points to a new pattern: compromised credentials used to push through normal publishing workflows, briefly exposing downstream users. What limited the impact here wasn’t any single control, but fast signal sharing and coordinated response across teams. The bar for this kind of attack has collapsed, and every platform is a target. What kept the window short, and blast radius small (this time) wasn't any single defense. It was teams sharing signals quickly, and we think this is the posture the ecosystem needs more of. Full writeup →

Docker is proud to join one of the most technical AI developer gatherings of the year - AI Dev '26, hosted by Andrew Ng. This is where builders come to share what’s working now in real-world AI systems. 🔥 Don’t miss Tushar Jain on the main stage:  Shipping Agents Safely: Boundaries That Actually Work Tushar will break down practical patterns for: • Runtime boundaries that actually work • Isolated execution environments • Secure credential access • Recovery-first design for autonomous systems If you're building with AI agents, this is a session worth attending. 📍 San Francisco 📅 April 29 | 10:30 AM More: https://lnkd.in/e5-GXM5s 

Developer growth is not just about what you learn, but how you think. Docker Captain Francesco Ciulla chats with Per Ploug Krogslund about the skills that actually matter for developers today, and why they go beyond just learning the next tool. What’s a skill that’s paid off most in your career? Watch https://bit.ly/4mIyA0H

How do you give AI agents freedom without losing control? Dan from The Morning Maker Show walks through what he says is the “biggest unlock in AI coding so far” - with a live demo of Docker Sandboxes. He shows how to get up and running quickly, which commands matter most, and what safely “unattended” actually looks like in your own codebase. A humorous, easy-to-follow breakdown of a practice that’s quickly becoming reality for developers. Watch the full video → https://bit.ly/4mFRAwR

A year of Docker Hardened Images, and we’re thrilled about the scale and adoption! But the real fun story is the road to getting here. Most of the industry optimized for easier paths - proprietary distros, incomplete SBOMs, and clean scans that don’t tell the full story. Docker went the other way, and did the hard things that matter to you: - multi-distro, not lock-in - from-source builds - signed attestations for everything This post breaks down what that actually looks like - and what to look for when evaluating any hardened image provider. Read →

Ever tried to build a multi-agent system and ended up having to wire together way too much infrastructure? This tutorial walks through a simpler approach using Docker Agent on a DigitalOcean Droplet - defining a full agent workflow in YAML and actually running it end to end. You’ll go from zero to a working “Bug Investigator” system where agents: • Analyze errors • Research fixes • Write code • Generate tests It also covers running with both cloud APIs and local models, and how to package agents as OCI artifacts for reuse. This is a great walkthrough if you’re experimenting with agent workflows and want something practical you can run and iterate on. Read the tutorial → https://do.co/4u2Nhhz

Claude Opus 4.7 is now supported in Docker Agent. Docker Agent is a framework for building + running custom agent teams. We support the models powering your work today, and we’ll keep adding the ones you’ll reach for next. Check out the latest release → https://bit.ly/42f0nw8

📣The Call for Speakers is extended for WeAreDevelopers World Congress North America! AI is moving fast, and the best lessons are coming from people shipping it for real. WeAreDevelopers North America is a new builders-first event for the AI era: hands-on, workflow-driven, and focused on what it takes to ship AI systems safely and at scale. With Docker co-hosting, we’re bringing together 10,000+ developers and practitioners from hundreds of leading companies to build, test, and share real patterns across agentic development, platform engineering, security, and cloud-native delivery. If you have a talk, demo, or hard-earned lesson to share, this is your opportunity to take the stage. 📍 San Jose • Sept 23–25 📝 CFP extended through April 30 Submit your talk → https://lnkd.in/dkhECnfc

Most sandboxing approaches force a tradeoff. Speed vs isolation. Flexibility vs security. Developer experience vs control. This post breaks down why Docker took a different path with Sandboxes - using microVMs to give agents a real development environment with strong isolation, without adding friction. It walks through: • Why containers and VMs fall short for agent workflows • How microVMs enable full Docker environments with no host access • Why we built a new cross-platform VMM from scratch • What this means for running agents safely in practice If you’re thinking about how to run agents autonomously without compromising your system, this is a useful look at the architecture behind it. Read more →