Skip to content
Kitbay
Submit

docker-sandboxes-network-credentials

Apache-2.0Updated on Nov 10, 2026625GitHub stars

A Docker-authored skill about what a Docker Sandboxes sandbox may reach on the network and which credentials it uses.

What the skill teaches

A Docker-authored skill about what a Docker Sandboxes sandbox may reach on the network and which credentials it uses. It walks the agent through sbx policy commands for global and per-sandbox egress rules, where deny wins over allow, and sbx secret commands for service secrets, secrets resolved at run time and private registry credentials. It explains that a proxy injects stored credentials on matching domains so the raw value stays outside the sandbox, and warns that OAuth passthrough can expose real tokens and that a leaked credential must be rotated.

Capabilities

  • Allow or block network destinations for sandboxes
  • Inspect and test egress policy
  • Store service and registry credentials for sandboxes
  • Explain how the proxy injects credentials