sbx/trivy-mixin

Docker, Inc

Aqua's open source vulnerability scanner as a mixin — the pinned, SHA256-verified release binar...

sbx/qemu

Docker, Inc

Registers QEMU user-mode emulators with the kernel's binfmt_misc via Docker (tonistiigi/binfmt) s...

sbx/amp-mixin

Docker, Inc

The frontier coding agent as a mixin -- Amp's own installer, the Amp credential, and its egress. ...

sbx/vale

Docker, Inc

Installs the Vale prose linter from a pinned GitHub release.

sbx/devin-mixin

Docker, Inc

Devin CLI by Cognition as a mixin -- the CLI and its auth wrapper in an overlay, with the passthr...

sbx/zeroclaw-mixin

Docker, Inc

ZeroClaw as a mixin — the pinned, digest-verified static binary in an overlay, with the Anthrop...

sbx/panw-endpoint-enforcement

Docker, Inc

Marks agent processes as running inside a sandbox so a host-side endpoint security policy engine ...

sbx/panw-siem-telemetry

Docker, Inc

Ships sandbox observability (process, network, file, and agent-activity logs) to a SIEM HTTP even...

sbx/packages-through-sfw

Docker, Inc

Installs Socket Firewall Free and routes npm, pip, pip3, and python3 -m pip commands through sfw ...

sbx/devin-enterprise-mixin

Docker, Inc

Devin CLI by Cognition, pinned to a Devin Enterprise deployment (<org>.devinenterprise.com). Laye...

sbx/claude-bedrock-mixin

Docker, Inc

Routes Claude Code at Amazon Bedrock with the AWS profile stored under the bedrock credential. La...

sbx/paperclip-mixin

Docker, Inc

Paperclip as a mixin — Node 24, the pinned paperclipai CLI and its built UI in an overlay, with...

sbx/shell

Docker, Inc

A plain shell sandbox on the shell-docker template — bash, git, apt, Docker, plus common CLI to...

sbx/goose

Docker, Inc

goose, the open-source agent now under the Linux Foundation's Agentic AI Foundation, as a mixin: ...

sbx/docker-tcp

Docker, Inc

Serve the sandbox's Docker Engine on TCP port 2375 and publish it on the host's loopback, so a Do...

sbx/agentmesh

Docker, Inc

Runs an agentmesh-node inside the sandbox and registers it as an MCP server with the agent.

sbx/bc-basic-auth

Docker, Inc

Allows access to a Business Central backend and lets the sandbox proxy inject Basic auth credenti...

sbx/cosmos-db-emulator

Docker, Inc

Runs the Azure Cosmos DB emulator (vNext, API for NoSQL) on the sandbox's Docker Engine, with the...

sbx/shell-credentials

Docker, Inc

Eight provider credentials for an agentless sandbox, resolved by the sandbox proxy.

Alpine Base

Docker Hardened Image

A secure, ultra-minimal Alpine Linux base image with essential system utilities for building lightweight containerized applications.

Debian Base

Docker Hardened Image

A secure, minimal Debian base image with essential system utilities for building and running containerized applications.

Docker Sandboxes Agent Templates

Docker Hardened Image

Docker Sandboxes Agent Templates (SBX) images for AI coding agents

docker/doodle

Docker, Inc.

A home for Docker Doodles

docker/sbx-kit-claude

Docker, Inc.

Anthropic's Claude Code, with API-key and subscription sign-in both resolved by the sandbox proxy.

docker/sbx-kit-codex

Docker, Inc.

OpenAI Codex CLI, OpenAI's agentic coding CLI.

docker/sbx-kit-claude-mixin

Docker, Inc.

Anthropic's Claude Code as a mixin — the native install in an overlay, with the `anthropic` cre...

docker/sbx-kit-codex-mixin

Docker, Inc.

OpenAI's Codex CLI as a mixin — the CLI in an overlay, with the OpenAI credential (API key or C...

docker/sbx-kit-shell

Docker, Inc.

A plain shell sandbox with bash, git, apt, Docker and common CLI tools; the base for agent mixins.

docker/sbx-kit-claude-acp

Docker, Inc.

Runs the Claude ACP adapter inside a Claude sandbox over stdio.

docker/sbx-kit-builder

Docker, Inc.

DHI-based Docker-in-Docker sandbox for building kits: dockerd, buildx, QEMU for multi-arch builds.