Security & supply chainDocker Sandboxes plug into GitHub Agentic Workflows as an agent runtime
Docker has published a walk-through of running an AI coding agent inside a Docker Sandbox as part of a GitHub Actions job, with the sandbox microVM, a private Docker daemon and a network allowlist doing the isolation. The example moves the agent's blast radius off the runner and behind a policy the workflow file can see.