Deleted files. Leaked secrets. Broken configs. Agents going off the rails at machine speed. Welcome to the new ‘AI Coding Agent Horror Stories’ series! Ajeet Raina delves into recent, real-world incidents, & what teams can do when agents act autonomously. Read issue 1: https://bit.ly/4frus3q

Gordon is now generally available. Docker’s AI agent understands your environment, inspects containers, and takes action - with your approval. Your coding assistant writes code. Gordon helps you ship it. Try it → https://bit.ly/4991lhr

Forbes just covered our Docker AI Governance announcement & the shift happening in enterprise AI adoption. If you’re deploying agents across engineering teams, this gets into why runtime policy, sandboxing, and MCP governance are becoming foundational → https://bit.ly/3PaW2r9

Most teams think safety slows things down. In ‘Silicon Minds, Human Hearts’ with Sammy Deprez, Docker COO Mark Cavage explains how safety actually enables speed as agents run autonomously. If you’re figuring out how to move faster without losing control, watch here: https://bit.ly/3PJgKhX

NIST changed how the NVD works. Most CVEs will no longer get CVSS scores or CPE mappings. If your scanning relies on NVD, that’s a real shift. What does your system rely on now? We break down what changed and what to reassess → https://bit.ly/4uiVlLG

Running Claude Code means giving an agent access to your repo, tools, and runtime. This guide shows how to keep control: local models, MCP tool access, and sandboxed execution working together. The combo that makes agents usable in real workflows, not just demos: https://bit.ly/437fatd

Running AI workflows exposes cracks in systems built for something else. This issue of the Docker Navigator looks at what breaks and how teams adapt: hardening images, isolating workloads beyond containers, handling supply chain attacks, & moving to production-ready systems - https://bit.ly/4dIYa2x

Not all isolation models are built for agents. This post breaks down chroot, containers, VMs, gVisor, and microVMs, and where each fails once agents start installing and mutating code. If you’re running agents, this will help you choose the right environment. Read → https://bit.ly/49xjQMB

AI can help you ship faster, but what happens when you don’t fully trust the code it writes? New Ship Happens with Ivar Conradi: • Why teams deploy daily • the importance of feature flags to reduce prod risk • How “feature ops” helps teams learn faster Watch → https://youtu.be/Oy1ca5rsCpU

Letting agents run freely sounds great, until they start changing everything. On the ‘Future of Data and AI’, Docker COO Mark Cavage explains why containers alone aren’t enough when agents run wild, & why Docker Sandboxes are the new requirement for agent workflows: https://bit.ly/4uDFPtl

Introducing Docker AI Governance. Teams are racing to deploy agents, but those agents access repos, data, & APIs with little visibility. Docker AI Governance is now available, so teams can move fast without losing control. More: https://bit.ly/4fgthUf

Containers are the default path to prod. That also makes the supply chain a major risk. At Devoxx UK, the interest in Docker Captain @maeddes.bsky.social’s Docker Hardened Images talk was a clear signal that devs are actively looking for better ways to handle container security.

Generating images shouldn’t mean API keys, credits, or sending prompts to the cloud. This shows how to run image generation locally with Docker Model Runner + Open WebUI, with a chat UI and API on your own machine. No cloud required. Read → https://bit.ly/49HYMmD

Running multiple AI agents at once? That’s where it gets real. You’ve likely already run into it: shared context, conflicts, resource contention, unclear boundaries. The recent Docker Navigator is a great place to start if you want to learn how to run this reliably: https://bit.ly/3QHZcTA

Ever feel like Docker tutorials are either too simple…or way too overcomplicated? Docker Captain Saloni Narang’s '7 Days of Docker' series cuts through the noise and drills down on just how Docker actually works. If you’ve been waiting for it to finally click, start here: https://bit.ly/4esEp04

Platform teams often need golden images with internal requirements baked in. This video shows how Docker Hardened Image (DHI) customizations let you define changes once, keep attestations intact, & have those changes persist automatically across every patch: https://bit.ly/3QRTSgk

Not all CVEs are equal. In containers, many vulnerabilities exist in the filesystem but aren’t exploitable. Treating them the same creates noise. Docker Hardened Images + Black Duck filter what’s real so teams focus on actual risk. Read → https://bit.ly/48IkarA

Early bird tickets still available for WeAreDevelopers World Congress! With Docker as co-host, this is a builders-first event focused on real workflows - AI, platform engineering, & security. Workshops, live builds, real systems. Tickets: https://bit.ly/4e7b7nD

Modern dev teams don’t just use agents, they build teams of them. In this Docker AI Labs newsletter: behind the scenes of how the Sandboxes team built a fleet of agents to test, triage, and fix code in CI, all running in the same sandbox model locally and in CI → https://bit.ly/3QHZcTA

Ever had a deploy blocked by CVEs in packages your app doesn’t even use? This blog walks through a real case with a ClickHouse deploy, why scanners flag it, and how removing unused packages changes the security conversation. Go from blocked to prod-ready → https://bit.ly/3OTb0BS

What does it take to run Hugging Face Spaces on Arm64? With Arm64 powering modern dev machines and 1M+ Hugging Face Spaces out there, compatibility matters. This session shows how to spot hidden x86 dependencies and fix them quickly with MCP tools. Watch → https://bit.ly/4sFY1Bj

Hardened images are great, but to truly make them your own, you need to add back in certs, tools, perms, and more. Customize Docker Hardened Images once, and SLSA Level 3 provenance, attestations, and SLA get applied automatically, with every patch! Full video: https://bit.ly/3QRTSgk

At AI Dev today, Tushar Jain's talk is packed! A room full of builders focused on moving from AI demos to real systems. Tushar’s talk breaks down what it takes to run agents for real - runtime, isolation, and trust. If you’re here, find us after at Booth #11!

Last day to submit your talk to WeAreDevelopers World Congress! With Docker as Presenting Partner, this is a builder-focused event centered on real workflows. Share your work - get feedback & connections to 10K+ devs solving the same problems. Submit here: https://bit.ly/4tgT82F

What happens when an AI agent runs in “YOLO mode”? Watch a live demo using a vulnerable Java app + GitHub Copilot to see how Docker Sandbox isolates risk and prevents credential leaks in real time. 📅 Apr 30, 11AM PST • Free virtual Join → https://bit.ly/4vYZq8X

What actually breaks software delivery at scale? Per Krogslund talks with Harness Field CTO Jignesh Patel about CI/CD spaghetti maps, AI speeding up chaos, and why DevOps strategy still starts with people, process, then tech. Watch → https://bit.ly/3QNntHJ

Trying to run AI agents beyond demos and into real workflows? This Docker Navigator issue shows how teams make it work - isolating agents in microVMs, turning local models into pipelines, running Docker in locked-down envs, and improving supply chain security. Read → https://bit.ly/4tRPb4q

WeAreDevelopers World Congress is shaping up to be a major moment for developers. With Docker as Co-Host, it’s a builders-first event focused on real workflows, live builds, and how teams actually ship AI systems at scale. San Jose, Sept 23-25 Tickets → https://bit.ly/4e7b7nD

What happens when you actually try to break Docker Sandboxes? Engineering manager at Reevo Cloud, Matteo Bisi does a hands-on stress test - digging into isolation boundaries, credential handling & more under real conditions. Read → https://bit.ly/3QLGwlL

1 week left to submit your talk to WeAreDevelopers World Congress! With Docker as Presenting Partner, this is a builder-focused event centered on real workflows. Building with AI, or real systems at scale? Share it Sept 23-25 in San Jose, with 10K+ devs. Submit: https://bit.ly/4tgT82F

We recently caught a malicious image pushed to Checkmarx/KICS on Docker Hub using stolen creds. We coordinated a response with Socket and Checkmarx. Read more on what happened, and why fast, open collaboration is the only way to shorten these windows → https://bit.ly/4mK4xWe

Docker is joining AI Dev this year in San Francisco! Don’t miss Tushar Jain: Shipping Agents Safely: Boundaries That Actually Work. Runtime boundaries, isolation, secure creds, recovery-first design. April 29 • 10:30 AM More: https://bit.ly/4dCdyOJ

Frameworks are temporary. Skills are forever. Docker Captain Francesco Ciulla + Per Krogslund dig into what devs should actually focus on: https://bit.ly/4mIyA0H

How do you give AI agents freedom without losing control? Dan (from the MorningMakerShow) demos Docker Sandboxes: getting started fast, & what safely “unattended” looks like in your codebase. A humorous & helpful breakdown for anyone looking to improve their AI agent process: https://bit.ly/4mFRAwR

Ever tried building a multi-agent system and ended up wiring too much infrastructure? This tutorial walks through a simpler approach using Docker Agent on a DigitalOcean Droplet - defining a full agent workflow in YAML and actually running it end to end. Try it → https://do.co/4u2Nhhz

Claude Opus 4.7 is now supported in Docker Agent. Docker Agent is a framework for building + running custom agent teams. We support the models powering your work today, and we’ll keep adding the ones you’ll reach for next. Check out the latest release → https://bit.ly/42f0nw8

📣 CFP is extended - now 4/30! As AI reshapes how teams build & ship software, real-world lessons are just as valuable as the tech itself. Share what you’ve learned with 10,000+ devs at WeAreDevelopers, with Docker as the Presenting Partner. Submit here: https://bit.ly/4tgT82F

Most sandboxing approaches force a tradeoff. This post breaks down why Docker uses microVMs for agents - full Docker environments, strong isolation, and fast startup without the usual compromises. What that looks like under the hood → https://bit.ly/4mATG0U

Running AI is no longer just about models. It’s about execution, isolation, and control. This issue of Docker Navigator explores what it takes to move from experimentation to production - with sandboxes, local model workflows, supply chain security and more → https://bit.ly/4tRPb4q

Tried running a Hugging Face Space on Arm and hit a random pip error? It’s usually not the code, it’s a hidden dependency issue. This shows how to scan a Space in ~15 minutes using Docker MCP Toolkit + Arm MCP Full walkthrough → https://bit.ly/4enFlTl

Want to run Hugging Face Spaces on Arm64? Join us tomorrow for a live Code-Along with Docker + Arm to scan, fix, and migrate a real Space using MCP Toolkit + Copilot, using real-world examples. 📅 April 16 🕘 12pm EST / 9am PST Join live → https://bit.ly/4sFY1Bj

New episode of Ship Happens. Per Krogslund talks with WordPress VIP CTO Brian Alvey about the web’s evolution, AI’s impact on software economics, how it’s reshaping publishing, and why open source still powers innovation. Watch → https://youtu.be/JiEQmHbwelE

We love seeing community contributions land where devs need them most Docker Captain Kristiyan Velkov’s Next.js containerization examples are now in the official repo. Built from real-world experience across modern frameworks → now available to every dev. https://bit.ly/4te03cX

In this live Code-Along with Docker, we’ll walk through how to assess compatibility of Hugging Face Spaces, identify gaps, and apply fixes using MCP servers and GitHub Copilot. www.youtube.com/live/rcmmBi-...

As MCP adoption grows, the challenge shifts from building to control - what’s running, is it secure, and who owns it. In her keynote at the MCP Dev Summit, Cecilia Liu breaks down why a unified control plane is needed. Watch (keynote at 01:02:51) → https://bit.ly/4c5SttC

Episode 3 of @globalai.community’s Made for Dev: Docker is live. From YAML to a working AI assistant in seconds. Sammy Deprez dives in with Oleg Šelajev, who demos how Docker Agent lets you define, run, and use agents locally without heavy setup. Watch → https://bit.ly/4bUN9KO

"Docker Hardened Images for Node.js, Python, and Rust also include Socket Firewall, which blocks malicious dependencies at install time." Another tool for securing your build pipeline - DHI are free and open source: socket.dev/blog/socket-...

Want to run HuggingFace Spaces on Arm64? Join the live Code-Along with Docker + Arm. Learn how to scan, fix, and migrate a real project using MCP Toolkit + Copilot, and how to identify & resolve compatibility gaps fast. 📅 April 16 🕘 12pm EST / 9am PST Subscribe → https://bit.ly/41jfyEg

What does engineering look like in the age of agents? This shift isn’t years away - it’s already happening. Zach Lloyd (Warp) and Mark Cavage (Docker) on moving from writing code to orchestrating teams of agents, and how to run them in real workflows. Watch → https://bit.ly/41Imta3