Coding Agent Horror Stories: The 29 Million Secret Problem | Docker

What this post added

This post details how Docker Sandboxes mitigate the risk of AI coding agents leaking credentials. It explains the attack vector where a poisoned npm package leverages AI CLIs with permission-bypass flags to scan for secrets. Docker Sandboxes address this by providing workspace-scoped filesystem access, preventing agents from seeing host credentials, and using proxy-injected secrets, ensuring sensitive information is not directly accessible within the isolated environment.