도구

Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

Define multi-container apps in compose.yaml and bring up services, databases, caches and the rest with one docker compose up, handy for agents setting up local dev and test dependencies. Maintained by Docker; included with Docker Desktop on macOS.

Daemonless, rootless container and pod manager with a Docker-compatible CLI for building, running and pushing OCI images. On macOS and Windows it runs inside a podman machine VM.

Programmable software delivery engine: write build, test and release pipelines with SDKs in Go, Python, TypeScript and five other languages, all running in containers so local and CI behave the same, with built-in OpenTelemetry tracing. Needs a container runtime such as Docker.

Docker's official CLI for building images, running and managing containers, viewing logs and pushing to registries, a foundational tool for agents setting up isolated environments. Needs a local or remote Docker Engine such as Docker Desktop.

From Dagger: gives each coding agent its own container and git branch so multiple agents work in parallel without interfering, with command logs and the ability to take over the terminal at any time. Connects via MCP; needs Docker and Git. Still experimental.

Docker's official MCP gateway (the docker mcp CLI plugin): runs servers from the Docker MCP Catalog in isolated containers, manages secrets, OAuth and tool toggles centrally, and gives multiple clients one endpoint. Built into Docker Desktop 4.59+; Docker CE and other setups must build the plugin.

Official Docker skills: containerize projects, optimize and harden Dockerfile builds, orchestrate with Compose, use Docker Sandboxes and Docker Agent, with confirmation guardrails before deletes and other destructive actions.