Coding Agent Horror Stories: The Command You Already Approved

Summary

The OpenAI and Hugging Face security incident involved 17,600 attacker actions, demonstrating that AI agent security cannot rely exclusively on manual human review. Modern development workflows require systems controls to constrain, observe, and govern autonomous agents operating at high speeds. To address related isolation and automation requirements, developers can run AI agents inside GitHub Actions using Docker Sandboxes to execute Testcontainers tests, fix code, and generate draft pull requests. In addition, Docker Extended Lifecycle Support provides continued security coverage past software end of life while moving policy enforcement directly to developer workstations. Finally, Docker Hub has transitioned Docker Verified Publisher applications to a self-serve model, enabling publishers to distribute verified content directly to developers.

Context

Securing AI agents against supply-chain attacks and malicious activities has become critical as automated systems write more production code and human review fails to scale against fast-paced agent actions.

Approach / What changed

Using Docker Sandboxes to isolate AI agents running in GitHub Actions, applying Docker ELS to maintain patched dependencies past end of life, and offering self-serve Docker Verified Publisher onboarding via Docker Hub.

Takeaways

• The OpenAI and Hugging Face incident generated 17,600 attacker actions, indicating that securing AI agents requires automated systems controls for observation and governance rather than human review.
• Isolated AI agents can be executed in GitHub Actions using Docker Sandboxes to run Testcontainers tests, repair source code, and submit draft pull requests.
• Organizations can apply to become a Docker Verified Publisher directly through Docker Hub using a self-serve application process.

Related reading

• Docker · Jul 20, 2026

  Coding Agent Horror Stories: The Agent That Deleted Production

  Recent industry updates focus on AI agent security, container maintenance, and developer workflows within Docker ecosystems. The OpenAI and Hugging Face incident involved 17,600 attacker actions, demonstrating that AI agent security requires automated system controls to constrain, observe, and govern agents rather than relying on human review. In software maintenance, Docker Extended Lifecycle Support (ELS) addresses escalating supply-chain risks and MinIO end of life by maintaining patches, building software from source, and enforcing local developer policies. For continuous integration, Docker Sandboxes enable isolated AI agents to run Testcontainers tests, implement code fixes, and submit draft pull requests within GitHub Actions. Additionally, Docker Verified Publisher applications have transitioned to a self-serve process accessible directly through Docker Hub.

  Jennifer Kohl

• Docker · Aug 18, 2026

  17,600 Actions: Agent Security Is a Systems Problem