Tag

#docker

Tagged “docker”

11 articles

MinIO is archived. Docker wants to rent you the patches.

Docker is pitching Extended Lifecycle Support as the answer to MinIO reaching end of life, promising patched images and audit evidence for up to five years past upstream archival. For CI/CD owners carrying an EOL dependency, that reframes a migration deadline as billable time.

Sep 7, 2026 · Tomás Vega Security & supply chain

Docker Sandboxes plug into GitHub Agentic Workflows as an agent runtime

Docker has published a walk-through of running an AI coding agent inside a Docker Sandbox as part of a GitHub Actions job, with the sandbox microVM, a private Docker daemon and a network allowlist doing the isolation. The example moves the agent's blast radius off the runner and behind a policy the workflow file can see.

Aug 21, 2026 · Tomás Vega Supply-chain security

Docker argues AI agent security is a systems problem, not a review problem

A Docker blog post citing an OpenAI/Hugging Face incident with 17,600 attacker actions says human review can't scale to agent-speed CI, and calls for controls that constrain, observe and govern agents at machine speed.

Aug 20, 2026 · Tomás Vega Runners & infrastructure

Docker VMM goes public beta with Docker Desktop's virtualizer rewritten in-house

Docker Desktop v4.86 ships a rewritten first-party virtualizer as a public beta on Mac and Windows, with Linux deferred to a GA targeted for the end of October.

Aug 19, 2026 · Maya Okonkwo Security & supply chain

Zero CVEs by default is a floor, not a moat

Docker is pitching its Hardened Images catalog as a way to make zero-CVE base images the default across your pipeline. That is a defensible floor. Treating a green scanner and a signed SBOM as the finish line is exactly how the last year of supply-chain incidents happened.

Aug 17, 2026 · Tomás Vega Developer experience

Docker Desktop grows its own VMM, and it is now open beta

Docker moved its home-grown virtualization layer into public beta on Docker Desktop v4.86 for macOS and Windows, with Linux coming at GA. It replaces the third-party backend Docker Desktop used to lean on and is tuned specifically for container workloads.

Aug 13, 2026 · Priya Nair Developer experience

'Governance is a developer experience problem': a Docker Captain reframes AI-agent trust

A Docker Captain argues in a new post that AI-agent governance stalls on trust, not capability, and that the platforms which win will be the ones that draw clear boundaries so developers do not have to reason about controls each time they ship. The DX framing is mostly right; the invisible-controls part is where the next incident hides.

Aug 9, 2026 · Tomás Vega Security & supply chain

Docker Hub gets OIDC federation for GitHub Actions, retiring the PAT-in-a-secret pattern

Docker has added OpenID Connect authentication for GitHub Actions on Team, Business and Docker Hardened Images plans, so workflows push and pull images with a short-lived per-run token instead of a stored Personal Access Token. It closes off one of the last static credentials still sitting in most Actions repos.

Aug 1, 2026 · Maya Okonkwo Security & supply chain

The SBOM you can trust is the one your build actually made

Docker published a guide arguing that SBOMs generated at build time beat post-build scans on completeness, accuracy and freshness. The distinction quietly changes what a CI pipeline is on the hook for.

Jul 8, 2026 · Tomás Vega Security & supply chain

Docker Content Trust gets a sunset date. The harder question is what you sign with next.

Docker has published a formal retirement plan for Docker Content Trust and the Notary v1 service at notary.docker.io, ten years after DCT shipped. The migration is mostly mechanical, the strategic question, about whether anyone downstream was actually verifying anything, is the part the guide cannot answer for you.

Jun 16, 2026 · Tomás Vega Security & supply chain

Docker Engine 29.4.3 moves the 'Copy Fail' mitigation off seccomp after the first fix broke 32-bit containers

Docker's default profile now uses AppArmor and SELinux to block the AF_ALG socket path that CVE-2026-31431 exploits, after a seccomp-only fix in 29.4.2 broke i386 binaries, Go 386 builds and Wine. The kernel patch is still the real fix; on Ubuntu it has not landed yet.

Jun 16, 2026 · Maya Okonkwo