Answers are generated based on the documentation.
How can we help?
What's new
- Docker Sandboxes Share agent skills read-only by default Sandboxes created with version 0.43.0 mount shared agent skills read-only by default. Choose read-only, read-write, or no access when creating a sandbox.
- Docker Sandboxes Run agents without mounting host files Create a sandbox without a host workspace mount. Keep agent files inside the sandbox across stops and restarts, and copy files between the sandbox and host when needed.
- Docker Sandboxes Install and update shared skills from Git repositories Install agent skills from Git repositories into a persistent store shared across sandboxes, and update or remove them with sbx skills.
- Docker Build Cloud Use Docker Build Cloud with standard Buildx Buildx 0.37.0 includes the cloud driver, so you can connect to Docker Build Cloud from the standard Buildx CLI plugin without installing a separate client.
- Docker Verified Publisher Join Docker Verified Publisher through self-service plans Apply for DVP Starter or Growth, complete checkout after approval, and manage publisher analytics, consuming domains, and billing.
- Docker Sandboxes Sign and enforce trusted sandbox kits Sign kits with cosign-compatible Sigstore signatures, verify keyless or key-based signatures, and reject kits outside a trusted-signer policy.
- Docker Sandboxes Define reproducible sandbox environments Capture an agent, workspaces, kits, credentials, ports, and resources in a shareable sbxenv.yaml file and manage it with sbx env.
- Docker Sandboxes Resolve sandbox secrets from external sources Keep references to 1Password, AWS Secrets Manager, or host commands in the secret store and resolve credentials on the host when the proxy needs them.
- Docker Sandboxes Run GPU workloads in sandboxes Pass an NVIDIA GPU through to a sandbox on supported Linux hosts for GPU-accelerated agent workloads.
- Docker Hardened Images Query DHI VEX data with the GraphQL API Build automation or dashboards that query image packages, CVEs, VEX statements, and suppressed vulnerabilities by digest.