Learn how AI coding agents can expose credentials in supply chain attacks and how Docker Sandboxes keep secrets out of an agent's reach.
#ai-agent
39 posts
Today
22 Jul
Explore governance at the runtime layer and learn why isolation, policy enforcement, and controlled tool access are becoming foundational for agentic systems.
17 Jul
Building Swiggy’s AI onboarding companion for delivery executives, where accuracy alone wasn’t enough and mentorship had to scale. For a new Delivery Executive (DE) joining Swiggy, the experience is often overwhelming, throwing a world of SOPs, incentive structures, zone logistics, and app workflows at them all at once. This friction is evident in our metrics, but the drop-off isn’t due…
10 Jul
Want Better Design-to-Code Results from Your Coding Agent? Start with a Design System.
Atomic ObjectCoding agents are getting pretty good at building screens from a screenshot, Figma link, or a loose description of what you want. But “pretty good” can still mean a lot of small cleanup work: the button is almost right, the spacing is close, the font weight is questionable, and the loading state somehow feels like […] The post Want Better…
8 Jul
AI agents are changing software development. Learn why your laptop is becoming the new production environment and why runtime governance matters.
2 Jul
My current software project had an issue, and, over time, it has become more of an issue as coding agents have gotten better. That problem is running parallel agents in our codebase while providing them strong methods to validate their work. The codebase was started in 2021. That’s before agentic coding was a thing, let […] The post Your Coding…
1 Jul
Learn why AI agent isolation matters, how Docker SBX enables safer AI workflows, and how Sandbox Kits help. Written by Docker Captain Karan Verma.
24 Jun
For most of my career, I had a decent sense for answering two questions: how much work is ready to go, and how long is it going to take? I could look at a healthy backlog with a couple of weeks of estimated stories, do some math, and give a pretty good guess of what […] The post Human Habits…
19 Jun
By Winston Chou, Adrien Alexandre, Lars Olds, Yi Zhang, Garrett Hagemann, and Nathan Kallus Introduction Imagine asking a data agent to analyze the causal relationship between two variables, such as the effect of watching a popular Netflix show on long-term member retention. It queries your data, runs a regression, and confidently returns an answer. How much should you trust it?…
18 Jun
In Part 1, we walked through six categories of AI coding agent failures and why they keep happening. The agent runs as you, with your filesystem permissions and your credentials, and nothing sits between the model's decision and the shell's execution. In Part 2, we looked at one specific version of that failure in detail,...
16 Jun
With the recent changes in agentic delivery, costs of development are going down, and processes are changing. That means there’s more time to try different methods and figure things out. Software today can still be clunky and irritating, with systems that take a lot of manual effort to glue together, but AI should be learning […] The post Will AI…
15 Jun
Agentic Android development works best when agents can build, install, run, test, and validate features against real devices or emulators without relying on Android Studio as the manual control center. In this article, “skills” means reusable agent instructions for a specific task, and “workflows” means separate working copies or environments where an agent can safely […] The post How to…
12 Jun
We’re in a time of accelerated innovation. Some say the AI bubble is going to pop, while some are betting everything on it being the future. As a participant in the development industry, sticking your head in the sand can be fatal. Yet, hopping on the hype train can seem intimidating or feel aimless at […] The post AI This,…
1 Jun
This is Part 2 of our AI Coding Agent Horror Stories series, an in-depth look at real-world security incidents exposing the vulnerabilities in AI coding agents, and how Docker Sandboxes deliver workspace-scoped isolation that contains the worst failures at the execution layer. In part 1 of this series, we mapped six categories of AI coding...
27 May
Agentic development tools have started to change the way I approach software work. Instead of only asking for a small autocomplete suggestion or a quick explanation, I can now ask an agent to inspect a problem, propose a plan, make code changes, and even iterate on a solution. That can be incredibly useful, especially when […] The post How I…
26 May
This was originally written and published by Christophe Spy (Director of Engineering, Medium) as an internal Medium Eng post. Desired outcomes (what “good” looks like) 🙏🏻 These are the kinds of changes we want to see if AI is going well at Medium. Less drudgery, more leverage Engineers use AI to remove repetitive, low‑leverage work (e.g. tedious refactors, boilerplate, large…
Earlier this year I mass-migrated my blog to Astro using Claude Code. 146 posts. 6,024 images. Canonical URLs, JSON-LD markup, sitemap generation, the whole stack. I'd spent hours writing a skills file to teach the agent about my blog's architecture, how deployment worked, what not to touch. And it worked. Claude Code rewrote components, fixed...
22 May
Over the past year, the way we use AI at Thumbtack has gone through a few phases. Early on it was mostly curiosity, people experimenting with ChatGPT and Copilot on side projects, sharing tips in Slack. Then the models got noticeably better at working inside real, mature codebases (not just greenfield projects) and the conversation shifted. It stopped being about…
19 May
Gordon understands your environment, proposes fixes, and takes action across your entire Docker workflow. Now generally available. Image 1: Gordon in Docker Desktop Why Gordon Exists Developers are more productive than ever. AI coding assistants are writing code, merging PRs and cutting review cycles. But the moment something breaks in a container, or a teammate...
18 May
This is issue 1 of a new series called Coding Agent Horror Stories where we examine critical security failures in the AI coding agent ecosystem and how Docker Sandboxes provide enterprise-grade protection against these threats. AI coding agents are everywhere. According to Anthropic's 2026 Agentic Coding Trends Report, developers are now using AI in roughly...
15 May
One of the more noticeable changes with coding agents shows up when you sit down to pair with someone newer to the codebase for mentorship pair programming. On the surface, things can look like they’re going unusually well. Code appears quickly, the structure is reasonable, and there are fewer moments where someone gets stuck trying […] The post Thanks to…
12 May
Most agent setups are overbuilt. You can feel the framework wanting to happen before the problem is even clear. There is a planner, a runtime, a memory layer, a tool registry, a workflow engine, and a long explanation for why all of that is necessary. Then you look at the actual job, and it is […] The post Try This…
10 May
I’ve been working with AI long enough to be past the “please write an epic poem about my dog” phase and into something that actually moves my work. The real shift for me, in the last couple of months, has been using tools like Claude Cowork and Cursor. It’s not because they generate better prose […] The post 26 Things…
7 May
Whether you are a software engineer, a product manager, or a designer, this quote should fundamentally change how we approach our daily routine. We are no longer just building interfaces; we are creating environments where agents can operate autonomously with minimal human interaction. What could be the fundamental requirement for such an environment ? In...
1 May
A Virtual Agent team at Docker: How the Coding Agent Sandboxes team uses a fleet of agents to ship faster
DockerI work on Coding Agent Sandboxes, aka “sbx” at Docker. The project provides secure, microVM-based isolation for running AI coding agents like Claude Code, Gemini, Codex, Docker Agent and Kiro. Agents get full autonomy inside a sandbox (their own Docker daemon, network, filesystem) without touching your host system. Over the past couple of weeks, we...
7 Apr
Expedia Group Technology — Engineering When your platform’s next user isn’t human Photo by Alex Vasey on Unsplash Earlier this month I hosted a town hall for Expedia Group ™ Platform Engineering organization, focused on the rapid progress happening in the agentic coding space, and what it means for us as engineers and as a platform team. Our teams are…
16 Mar
My experience with AI coding agents, like Claude Code, Codex CLI, or Augment Code’s Auggie has been that they are most effective when they can run autonomously, without frequent human intervention. In order to do that the AI needs permissions to make changes to the codebase, run tests, perform web searches, etc. Each AI coding […] The post How I…
13 Mar
Agents have enormous potential to power secure, personal AI assistants that automate complex tasks and workflows. Realizing that potential, however, requires strong isolation, a codebase that teams can easily inspect and understand, and clear control boundaries they can trust. Today, NanoClaw, a lightweight agent framework, is integrating with Docker Sandboxes to deliver secure-by-design agent execution....
11 Mar
It's 11 PM. You've got a JIRA ticket open, an IDE with three unsaved files, a browser tab on Stack Overflow, and another on documentation. You're context-switching between designing UI, writing backend APIs, fixing bugs, and running tests. You're wearing all the hats, product manager, designer, engineer, QA specialist, and it's exhausting. What if instead...
23 Feb
Docker Sandboxes is a new primitive in the Docker's ecosystem that allows you to run AI agents or any other workloads in isolated micro VMs. It provides strong isolation, convenient developer experience and a strong security boundary with a network proxy configurable to deny agents connecting to arbitrary internet hosts. The network proxy will also...
17 Feb
When it comes to building dynamic and real-work solutions, developers need to stitch multiple databases (relational, document, graph, vector, time-series, search) together and build complex API layers to integrate them. This generates significant complexity, cost, and operational risk, and reduces speed of innovation. More often than not, developers end up focusing on building glue code...
16 Feb
Ever wanted to run a personal AI assistant that monitors your WhatsApp messages 24/7, but worried about giving it access to your entire system? Docker Sandboxes' new shell sandbox type is the perfect solution. In this post, I'll show you how to run NanoClaw, a lightweight Claude-powered WhatsApp assistant, inside a secure, isolated Docker sandbox....
15 Jan
We use GenAI in every facet of technology now - internal knowledge bases, customer support systems, and code review bots, to name just a few use cases. And in nearly every one of these, someone eventually asks: What stops the model from returning something the user shouldn’t see?” This is a roadblock that companies building...
16 Dec 2025
Voice is the next frontier of conversational AI. It is the most natural modality for people to chat and interact with another intelligent being. However, the voice AI software stack is complex, with many moving parts. Docker has emerged as one of the most useful tools for AI agent deployment. In this article, we'll explore...
12 Dec 2025
ChatGPT is great at answering questions and generating code. But here's what it can't do: execute that code, query your actual database, create a GitHub repo with your project, or scrape live data from websites. It's like having a brilliant advisor who can only talk, never act. Docker MCP Toolkit changes this completely. Here's what...
3 Dec 2025
The Interaction Changes Everything: Treating AI Agents as Collaborators, Not Automation
Engineering at MicrosoftDiscover how treating AI agents as collaborators, not automation, transforms engineering workflows and accelerates complex projects The post The Interaction Changes Everything: Treating AI Agents as Collaborators, Not Automation appeared first on Engineering@Microsoft.
2 Dec 2025
For most developers, getting started with AI is still too complicated. Different models, tools, and platforms don’t always play nicely together. But with Docker, that’s changing fast. Docker is emerging as essential infrastructure for standardized, portable, and scalable AI environments. By bringing composability, simplicity, and GPU accessibility to the agentic era, Docker is helping developers...
18 Nov 2025
Running a Chat UI Agent doesn’t have to involve a complicated setup. By combining Docker with the Vercel AI SDK, it’s possible to build and launch a conversational interface in a clean, reproducible way. Docker ensures that the environment is consistent across machines, while the Vercel AI SDK provides the tools for handling streaming responses...
14 Jul 2025
Microsoft’s AI-powered code review assistant has transformed pull request workflows by automating routine checks, suggesting improvements, and enabling conversational Q&A, leading to faster PR completion, improved code quality, and enhanced developer onboarding. Its seamless integration and customizability have driven widespread adoption within Microsoft The post Enhancing Code Quality at Scale with AI-Powered Code Reviews appeared first on Engineering@Microsoft.