#developer-workstation
Tagged “developer-workstation”
2 articlesSecurity & supply chain
Docker returns to its coding-agent series with an argument shaped like a CI problem: no layer between the agent and the host
The second entry in Docker's Coding Agent Horror Stories, published on July 20, argues that a coding agent runs under the developer's filesystem permissions and credentials with nothing isolating it from the host by default. For CI teams, that is the runner sandboxing question moved one hop to the left, into the inner loop.
Jul 29, 2026 · Maya OkonkwoSecurity & supply chainThe workstation is in scope now
A DevOps.com essay argues the laptop that pushes commits belongs inside the supply-chain threat model, citing the Megalodon campaign that injected malicious GitHub Actions workflows into thousands of repositories and a separate malicious VS Code extension incident. What CI-side controls actually catch this, and where the pipeline runs out of leverage.
Jul 19, 2026 · Tomás Vega