Docker, Inc

We're live at AI Engineer World's Fair! Come find us at Booth P12 to talk about what happens after your code is generated. If you're experimenting with coding agents, thinking about AI governance, or trying to safely move faster with AI in production - let’s compare notes. Show us what you’re working on, and we can show you what we're building. Stop by, ask questions, or just come chat with the team. 📍 Booth P12

If a critical vulnerability were disclosed tomorrow, how quickly could you answer a simple question: where are we exposed? That's the problem SBOMs solve. This guide explains what an SBOM actually is, why it's becoming a baseline requirement for software supply chain security, and how teams are using them to improve vulnerability management, compliance, and incident response. Read →

“An AI coding agent is a junior developer with root access, the ability to type at 10,000 words per minute, and no instinct for when to stop and ask.” Filesystem destruction, secret exposure, prompt injection, and prod outages. This AI Agent Horror Story walks through real-world incidents, along with the architectural patterns teams are adopting in response. Read → https://bit.ly/44jxdNH

Every package you install, image you pull, and dependency you inherit expands the software supply chain. This guide outlines the practices that matter most once you move from understanding supply chain security to implementing it: trusted content, verification, policy enforcement, and continuous monitoring. If you're trying to figure out where to start, or what comes next, this connects the pieces. Read →

The interesting part of AI-native development isn't writing another prompt. It's figuring out how to make skills reusable, measurable, and reliable across teams. Oleg Šelajev and 🎩 Baruch Sadogursky from Tessl dig into some of the essential concepts developers are encountering as AI workflows mature. They discuss skill registries, versioning, evals, and context engineering - including how to tell whether a skill is actually improving your agent or just adding more tokens. They also explore how these ideas fit into sandboxed workflows and why AI-native development is starting to look a lot more like software engineering. Watch → https://lnkd.in/eH4gngY7

AI Engineer World’s Fair starts next week! If you're heading to San Francisco, come find the Docker team at booth P12. We'll be talking about AI Governance, agent autonomy, and the infrastructure needed to run AI-native systems safely at scale. Join us for sessions from Tushar Jain, Rowan Christmas, and Dan Ndombe, and see Docker’s latest AI capabilities in action. More info, and - last chance to grab tickets! → https://lnkd.in/eDRs_aJJ

In this special security edition of Ship Happens, we compiled perspectives from tech leaders tackling some of the harder security questions emerging alongside AI adoption. What happens when AI-generated code outpaces human review? Are today's AI security models sustainable? How much autonomy should agents really have? And what breaks when organizations try to scale AI faster than their controls can evolve? And - what is the industry getting wrong? Hosted by Per Ploug Krogslund, you'll hear a number of takes from our guests that challenge conventional thinking about security assumptions, AI governance, and the long-term sustainability of today's AI ecosystem. Watch → https://lnkd.in/eyaXWHpa

Planning your AI Engineer World's Fair schedule? Save some room for after the expo floor closes. If your ideal post-conference agenda involves fewer slides and more honest conversations, we've got you covered. Docker is joining Tailscale, Aikido Security, Inngest, and Rootly at Golden Eye Social for an evening of digital darts, drinks, food, and good company. 📍 Golden Eye Social, San Francisco 🕕 July 1 | 6–9 PM PDT RSVP → lu.ma/2avil0ni

As agents take on more work, securing how they connect to tools matters more than ever. We're proud to help advance a new industry standard for connecting AI safely as a launch partner in Cross App Access (XAA), alongside 25+ AI leaders including Atlassian, Claude Code, Cursor, Okta, and Zoom. By adopting Cross App Access, our customers get: - AI that plays by their rules - only connecting to what it’s allowed to - Faster launches, without lengthy security reviews that slow teams down  - Smoother user experience, with fewer manual agent connections and fewer authorization prompts Enterprise AI security and productivity are finally aligned.   Read the announcement and see the full list of XAA partner integrations: https://lnkd.in/ggQdHKXe