The most valuable AI conversations aren't about the models. They're about trust, runtime controls, and the infrastructure around them. This Ship Happens compilation explores what changes as teams move from experimenting with agents to relying on them. https://youtu.be/XrTca1UbCq0

Not all SBOMs tell the same story. Build timing and tooling determine whether an SBOM is complete enough for vulnerability management - or just another compliance artifact. This guide explains what makes an SBOM useful: https://bit.ly/3QYHuvx

The rm -rf ~/ incident wasn't just a bad command. This AI Coding Agent Horror Story explores why the same failure pattern keeps appearing across coding agents, and why teams are changing how agents execute. Read → https://bit.ly/4p0B7El

That vector database talk was great but have you considered: throwing things? Docker + Tailscale + Aikido Security + Inngest + Rootly AI are taking over a darts lounge in SF tonight: drinks, food, good people - no pitches, and - the World Cup game on! July 1, 6PM, Golden Eye Social: lu.ma/2avil0ni

We're live at AI Engineer World's Fair! If you're working with agents, AI governance, or trying to safely move faster with AI in prod - let’s compare notes. Show us what you’re working on, bring us your toughest questions, or just come chat with the team. 📍 Booth P12

If a critical vulnerability dropped tomorrow, how fast could you answer: where are we exposed? That's the problem SBOMs solve. This guide explains what they are, why they matter, and how teams are using them in practice: https://bit.ly/3SyH53j

“An AI coding agent is a junior developer with root access, the ability to type at 10,000 words per minute, and no instinct for when to stop and ask.” This AI Agent Horror Story walks through real-world incidents, and what security patterns teams can adopt in response: https://bit.ly/4eLf93H

Every package install, pulled image, & inherited dependency expands the software supply chain. If you're trying to figure out where to start, or what comes next - from trusted content, verification, policy enforcement, & continuous monitoring - this guide connects the pieces: https://bit.ly/4uV9Q7K

AI Engineer World’s Fair starts next week! Join Docker sessions from Tushar Jain, Rowan Christmas, and Dan Ndombe on AI Governance, agent autonomy, and AI-native infrastructure. Find us at Booth P12! Last chance to get your ticket → https://www.ai.engineer/worldsfair/2026

The expo floor closes. Time for the AI conversations you won't find on stage. If you're at AI Engineer World's Fair, join Docker, Tailscale, Aikido Security, Inngest, and Rootly AI for drinks, darts, and good company. 📍 Golden Eye Social, SF 🕕 July 1, 6PM → lu.ma/2avil0ni

As agents take on more work, securing how they connect to tools matters more than ever. Docker is proud to join 25+ partners like Atlassian, Claude, Cursor, Okta, & Zoom in supporting Cross App Access (XAA), helping AI connect securely across applications. https://bit.ly/4eEYVsP

Every package you install, base image you pull, and dependency you inherit is a trust decision. This guide explains the controls behind software supply chain security, from SBOMs and provenance to image signing and trusted base images: https://bit.ly/4vtlkk2

A lot of security guidance for Agents leaves important gaps. Not because it's wrong, but because agents behave fundamentally differently from the applications most teams are used to protecting. This guide explains where the real control points are: https://bit.ly/3SjqAIk

Agents are helping generate more code than ever. So why aren't organizations shipping proportionally faster? Docker CISO Mark Lechner’s LeadDev London session digs into the trust gap behind agent adoption, what fails, and what effective governance looks like in practice → https://bit.ly/4oJgIUw

AI governance is becoming one of the most talked-about topics in AI. The challenge: most governance guidance assumes you're governing models, not agents. This guide explains the principles and controls that organizations are building around AI systems today. https://bit.ly/3QqECHC

Your agents can write code, call APIs, modify files, & spin up containers. What makes them useful is also why many devs hesitate before letting them run unattended. Join Docker's Dan Ndombe and Data Science Dojo on June 24 to learn how to run them safely. Register: https://bit.ly/4exTGep

What actually makes a container image "hardened"? A hardened image is not just a smaller image. Hardening = minimization + continuous patching for near-zero CVEs + verifiable metadata (SBOMs, provenance, VEX, signatures). Read this guide to learn more: https://bit.ly/4owRKqZ

Docker has joined Athena, a new cross-industry coalition for the coordinated defense of open source software. As AI accelerates vulnerability discovery, industry collaboration matters more than ever. Here's why we're participating & what it means for developers: https://bit.ly/4uGWv31

The interesting questions about agents aren't really about the model anymore. This Elastic video focuses on the part developers eventually run into: trust, autonomy, and where the boundaries should be, through a clear, practical walkthrough of Docker Sandboxes: https://bit.ly/4elgHRx

Run LLMs locally. No cloud required. Docker Captain Pawel Piwosz has a new course on using Docker Model Runner to run, manage, and integrate local AI models into your applications. Get started: https://bit.ly/4ggjEpa

Every agent workflow eventually runs into the same questions: What can it access? What happens when it makes a mistake? This issue of Docker Navigator explores how teams are answering them - with AI Governance, MCP controls, sandbox isolation & safer autonomous execution: https://bit.ly/4vgkgja

Aikido now scans Docker Hardened Images with built-in VEX support. CVEs Docker has verified as non-exploitable drop out automatically, leaving teams with findings that actually matter. Read the walkthrough → https://bit.ly/4eBhoYj Info on the upcoming Docker + Aikido webinar in the comments!

AI may be accelerating software development, but it isn’t removing engineering fundamentals. In this special Ship Happens highlight episode, six engineering leaders share what they’re seeing as AI moves from experimentation into real software delivery: https://bit.ly/43s92vT

When we introduced Gordon, the goal wasn't to build another chatbot. It was to help developers get unstuck. Seeing users make Gordon part of their daily workflow & solve problems that other tools couldn't, tells us we're heading in the right direction. Have you tried Gordon? https://bit.ly/49RXyFH

Agents may be the reason Docker Sandboxes exist, but they’re not the only use case. This InfoWorld article explains why Docker uses microVMs, how they differ from containers, & what they unlock for developers running untrusted code, CI workloads, and agent workflows: https://bit.ly/4uWi5S5

The internet was built to move information. At some point, that turned into a data extraction economy. Per Krogslund talks with Ruben Verborgh (Professor, Ghent University) on why today’s AI landscape may be unsustainable, & what a better model could look like: https://youtu.be/EkWxU83Fp54

What Docker tip do you wish you learned sooner? We asked Docker Captains that question and got 7 practical lessons every engineer should know, from multi-stage builds and Docker Scout to `.dockerignore` and container hardening. Read them here https://bit.ly/43O7Xyx

How often have you researched the same topic twice because the first round of notes disappeared into Slack, a doc, or a browser tab? This shows how to build a repeatable research workflow - pull relevant articles, analyze trends locally, & generate a reusable artifact: https://bit.ly/4lVqWzz

Why are hardened images suddenly everywhere? AI is finding vulnerabilities faster, & developers keep inheriting risk from software they didn't choose. If you're responsible for container security, this RedMonk article by Kate Holterhoff explains what is driving that shift: https://bit.ly/4vu9m9w

Most organizations don’t have an agent problem. They have a visibility problem. This Techstrong.ai article covers Docker AI Governance and how teams can apply policy, controls, and auditability once agents start interacting with real systems. Read → https://bit.ly/4e70b7S

That’s a wrap on LeadDev London! Across talks, demos, roundtables, & conversations at the booth - the focus was clear: teams want the speed of AI agents without losing control of what gets built and shipped. Thanks to everyone for the great conversations!

Packed room for Docker CISO Mark Lechner at LeadDev London! His session, 'Ship 10x Code Safely With Agents', focused on a challenge many teams are already facing: how to turn AI-generated code into shipped software without compromising security.

One command. A dev’s home directory wiped in seconds. Issue 2 of ‘AI Coding Agent Horror Stories’ breaks down the rm -rf ~/ incident, why these failures keep happening, and the isolation patterns teams are starting to rely on. Read → https://bit.ly/49zL9Gj

An agent is doing exactly what you asked. Then you start wondering what else it can access. Justin Mitchell walks through Docker Sandboxes, covering disposable environments, Git workflows, and where sandboxes fit once agents start executing code. Watch → https://bit.ly/4vrG0IV

Agents break a lot of the assumptions that containers were built around. Docker Captain Vladimir Mikhalev explains why autonomous agents change the trust model, why Docker moved toward microVM isolation, and why “it works” no longer means “it’s safe.” Read → https://bit.ly/3QdmII3

At LeadDev or AI DevCon this week? If you're building AI into production and wondering who's asking the hard security questions - this is the room. Join Docker and Black Duck’s evening meetup on June 2. Limited spots - secure yours → https://luma.com/o9i3yqns

Containers can feel simple on the surface, but there’s a lot happening under the hood. Techquickie teamed up with Docker Captain Bret Fisher to unpack the Linux concepts and container workflows behind Docker. Great watch for developers and homelabbers. https://youtu.be/W5fK8BmgBow

AI agents get more useful once they can execute code. They also get riskier. Bijan Bowen explores Docker Sandboxes, covering isolated execution, network controls, and local AI integration for safer agent workflows. Watch → https://www.youtube.com/watch?v=kNGXuIPXR24

London, we’re ready. Docker is heading to LeadDev London on June 2-3 to talk about what it takes to build with AI agents safely at scale, from governance and runtime isolation to production-ready workflows. 📍 Booth #314 Join us: leaddev.com/leaddev-london

3000 AI Engineers joined Docker’s Tushar Jain at AI Dev San Francisco to dig into what it takes to ship AI agents safely in production. Watch the full talk for what’s new in runtime isolation, governance boundaries, & how teams are safely running autonomous agents: https://bit.ly/4wZ8ifp

This ‘Ship Happens’ is a very different kind of AI conversation. Per Krogslund talks with Professor Ruben Verborgh (Ghent University) on what is unsustainable in the current AI data landscape, and what an ‘insights economy’ could look like instead: https://bit.ly/3RndRUC

A hardened image breaks your build. An agent needs more access than you want to give it. A local AI setup falls apart in prod. This issue connects the patterns teams are running into across AI workflows, isolation, & security, and what next steps you can take. https://bit.ly/4dIYa2x

Running agents means balancing freedom and control. You want them to execute real workflows, not access everything. Docker AI Governance defines that boundary with unified sandbox, network, and MCP policies, enforced everywhere with full visibility. Available now: https://bit.ly/4ukeuN3

Most GenAI projects don’t fail because of the model. They fail somewhere between “it works on my machine” & getting an agentized system running reliably in prod. Docker Captain Harsh Manvar & Ajeet Raina's new book focuses on running real workloads without it catching fire: https://amzn.to/3PeXZmr

At LeadDev or AI DevCon this week? If you're building AI into production and wondering who's asking the hard security questions - this is the room. Join Docker and @blackduckappsec.bsky.social 's evening meetup on June 2. Limited spots - secure yours → https://luma.com/o9i3yqns

Custom Catalogs and Profiles are now generally available in Docker’s MCP Catalog and Toolkit! A major step toward making MCP usable at enterprise scale, with trusted MCP catalogs, reusable tool Profiles, and portable OCI-based workflows. Get started → https://bit.ly/4v16D7g

Deleted files. Leaked secrets. Broken configs. Agents going off the rails at machine speed. Welcome to the new ‘AI Coding Agent Horror Stories’ series! Ajeet Raina delves into recent, real-world incidents, & what teams can do when agents act autonomously. Read issue 1: https://bit.ly/4frus3q

Gordon is now generally available. Docker’s AI agent understands your environment, inspects containers, and takes action - with your approval. Your coding assistant writes code. Gordon helps you ship it. Try it → https://bit.ly/4991lhr

Forbes just covered our Docker AI Governance announcement & the shift happening in enterprise AI adoption. If you’re deploying agents across engineering teams, this gets into why runtime policy, sandboxing, and MCP governance are becoming foundational → https://bit.ly/3PaW2r9

Most teams think safety slows things down. In ‘Silicon Minds, Human Hearts’ with Sammy Deprez, Docker COO Mark Cavage explains how safety actually enables speed as agents run autonomously. If you’re figuring out how to move faster without losing control, watch here: https://bit.ly/3PJgKhX