Source profile
docker.com
A field appears only when the current profile revision carries supporting evidence. Missing context stays visibly unknown.
Verified Publisher applications are now self-serve with two plans, priority search ranking and reports that name the companies pulling your images.
Reality
Hugging Face reconstructed a four-and-a-half-day agent campaign. Docker's read: thirty seconds of review per action is 147 hours of work, and clustering only gets you down to 52.
Reality
CVE-2026-22708 let injected text rewrite a Cursor agent's environment, so an approved "git branch" ran something else. It worked with an empty allowlist too.
Reality
Docker AI Governance now streams every agent policy decision into the SIEM security already runs, with a searchable copy in Docker Cloud. Enforcement was the easy half.
Reality
Docker's ESP32 walkthrough treats the espressif/idf image as settled ground and spends its energy on sandboxing AI coding agents. The containment boundary now matters more than the toolchain.
Reality