# Coding Agent Horror Stories: The Command You Already Approved

[Docker](https://yomu.fyi/company/docker) · Jennifer Kohl · Aug 18, 2026

**Type:** Announcement

## Summary

The OpenAI and Hugging Face security incident involved 17,600 attacker actions, demonstrating that AI agent security cannot rely exclusively on manual human review. Modern development workflows require systems controls to constrain, observe, and govern autonomous agents operating at high speeds. To address related isolation and automation requirements, developers can run AI agents inside GitHub Actions using Docker Sandboxes to execute Testcontainers tests, fix code, and generate draft pull requests. In addition, Docker Extended Lifecycle Support provides continued security coverage past software end of life while moving policy enforcement directly to developer workstations. Finally, Docker Hub has transitioned Docker Verified Publisher applications to a self-serve model, enabling publishers to distribute verified content directly to developers.

## Context

Securing AI agents against supply-chain attacks and malicious activities has become critical as automated systems write more production code and human review fails to scale against fast-paced agent actions.

## Approach / What changed

Using Docker Sandboxes to isolate AI agents running in GitHub Actions, applying Docker ELS to maintain patched dependencies past end of life, and offering self-serve Docker Verified Publisher onboarding via Docker Hub.

## Takeaways

- The OpenAI and Hugging Face incident generated 17,600 attacker actions, indicating that securing AI agents requires automated systems controls for observation and governance rather than human review.
- Isolated AI agents can be executed in GitHub Actions using Docker Sandboxes to run Testcontainers tests, repair source code, and submit draft pull requests.
- Organizations can apply to become a Docker Verified Publisher directly through Docker Hub using a self-serve application process.

**Tags:** [CI/CD](https://yomu.fyi/topic/ci-cd), [Docker](https://yomu.fyi/topic/docker), [LLMs](https://yomu.fyi/topic/llm), [Testing](https://yomu.fyi/topic/testing)

[Read original post](https://www.docker.com/blog/coding-agent-horror-stories-the-command-you-already-approved)