Sign inSign up

sbx/panw-endpoint-enforcement-kit:20260922-5e076b79ff12e17f40d1cc93f53825a705d2b7da

Manifest digest

sha256:e5582ebf7fd7081c493f78552e2b7233b6ccfda8cdcee1f2c281bf75afab533d

Last pushed

about 24 hours by dockerpublicbot

Type

Sandbox Kit

Manifest digest

sha256:e5582ebf7fd7081c493f78552e2b7233b6ccfda8cdcee1f2c281bf75afab533d

OverviewSpec
MIXIN

Marks agent processes as running inside a sandbox so a host-side endpoint security policy engine can permit sandbox-wrapped agents while denying any agent process that spawns outside a sandbox.

Arguments
NameRequiredDefaultDescription
markerIdOptionalsandbox-wrapped

Identity string the host endpoint policy keys on to allow this process.

Apply this mixin to a sandbox

sbx run <agent> --kit sbx/panw-endpoint-enforcement-kit:20260922-5e076b79ff12e17f40d1cc93f53825a705d2b7da

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS
brew install docker/tap/sbx
Windows
winget install Docker.sbx
Learn more about docker sbx⁠