container isolation
Put the Agent in a Box: Running Claude Code in a Container
AI coding agents run commands with your privileges. A container lets you decide, once and in a reviewable file, what they can see and reach ...
Nitish Mane | | Agent Sandboxing, agentic AI, AI agent security, AI Coding Agents, AI coding tools, Autonomous Coding Agents, CI/CD security, Claude Code, Claude Code Security, container isolation, Credential Management, Developer Security, DevSecOps, Docker containers, docker security, least privilege, Network Isolation, Prompt Injection, Secure Development Environments
Hardening the Core: Container Validation and Malicious Package Defense
Docker images are becoming a major software supply chain risk. Learn why scanning alone is not enough and how layered security can protect containers from build to runtime ...
Sean Roth | | CI/CD security, cloud native security, container image vulnerabilities, container isolation, container registries, container runtime security, container security, container vulnerability scanning, dependency security, DevSecOps, Docker hardening, Docker image security, image lifecycle security, image validation, malicious container images, malicious packages, minimal base images, non-root containers, runtime protection, SBOM, secure build practices, secure Docker images, software supply chain security, zero-day threats
What to Expect From Kubernetes 1.36
Kubernetes 1.36 launches April 22, 2026, marking a major shift in networking as Ingress-Nginx retires in favor of the more scalable Gateway API. Key updates include bolstered Linux User Namespaces for better ...
Adrian Bridgwater | | admission control config, CloudNativeCon, cluster security, container isolation, Deployment Stability, DRA, Dynamic Resource Allocation, EKS, fat image anti-pattern, gateway API, ingress-nginx retirement, Karpenter, KubeCon Europe, Kubernetes 1.36, Linux user namespaces, LLM weights, manifest-based admission control, OCI artifacts, platform engineering, security patches, specialized hardware, taints and tolerations, upgrade risk, VolumeSource, WatchCache

