Docker Sandboxes mixins: endpoint enforcement + SIEM telemetry for sandboxed agents
280
Ships sandbox observability (process, network, file, and agent-activity logs) to a SIEM HTTP event collector for dashboards, correlation, and automated response. Closes the visibility gap for what runs inside the sandbox.
| Name | Required | Default | Description |
|---|---|---|---|
siemCollectorAuthId | Optional | | Cortex XSIAM HTTP Collector API key ID (numeric, non-secret), sent as the x-xdr-auth-id header alongside the Authorization token. XSIAM requires both; leave empty for collectors that authenticate with the Authorization header alone. |
siemCollectorHost | Required | — | SIEM HTTP event collector ingestion host (FQDN, no scheme). |
siemCollectorPath | Optional | /logs/v1/event | HTTP path on the collector to POST events to. |
${{ kit.args.siemCollectorHost }}
raw.githubusercontent.com
packages.fluentbit.io
github.com
codeload.github.com
archive.ubuntu.com
security.ubuntu.com
ports.ubuntu.com
download.docker.com
sbx run <agent> --kit docker.io/ajeetraina777/sbx-kits-panw:siem-telemetry --set siemCollectorHost=<siemCollectorHost>Run the following command to install sbx on your machine.
brew install docker/tap/sbxwinget install Docker.sbxTwo Docker Sandboxes mixins
(kind: mixin) that integrate sandboxed AI coding agents with an external
security platform along two axes:
Both are kind: mixin, schemaVersion: "2", and layer onto any base agent
(e.g. claude).
Source and full docs: https://github.com/ajeetraina/sbx-kits-panw
| Tag | Kit | Purpose |
|---|---|---|
endpoint-enforcement | endpoint-enforcement | Marks sandbox-wrapped agent processes so a host-side endpoint policy can permit them and deny agents spawned outside a sandbox. |
siem-telemetry | siem-telemetry | Forwards sandbox observability (process, network, file, agent activity) to a SIEM HTTP event collector via Fluent Bit, with a proxy-injected collector credential. |
Run a base agent with one kit:
sbx run claude --kit docker.io/ajeetraina777/sbx-kits-panw:endpoint-enforcement .
Stack both — enforcement governs where the agent runs, telemetry reports what it did:
sbx run claude \
--kit docker.io/ajeetraina777/sbx-kits-panw:endpoint-enforcement \
--kit docker.io/ajeetraina777/sbx-kits-panw:siem-telemetry \
--kit-arg siem-telemetry.siemCollectorHost=collector.example.internal .
See each kit's README on GitHub for its arguments, credential bindings, and the published-OCI / git-reference / local-path invocation forms.