Zum Inhalt springen
Kitbay
Einreichen

docker-sandboxes-network-credentials

Apache-2.0Aktualisiert am 10. Nov. 2026625GitHub-Sterne

A Docker-authored skill about what a Docker Sandboxes sandbox may reach on the network and which credentials it uses.

Was der Skill vermittelt

A Docker-authored skill about what a Docker Sandboxes sandbox may reach on the network and which credentials it uses. It walks the agent through sbx policy commands for global and per-sandbox egress rules, where deny wins over allow, and sbx secret commands for service secrets, secrets resolved at run time and private registry credentials. It explains that a proxy injects stored credentials on matching domains so the raw value stays outside the sandbox, and warns that OAuth passthrough can expose real tokens and that a leaked credential must be rotated.

Funktionen

  • Allow or block network destinations for sandboxes
  • Inspect and test egress policy
  • Store service and registry credentials for sandboxes
  • Explain how the proxy injects credentials