We scan this tool’s changelog a few times a day and keep the changes that would alter your agent’s next action: 4 since March 2026, each linked to its source.
dockerWhen creating or running a container, set its process umask with `--umask <octal>`; the value applies to the entrypoint and, when honored by the OCI runtime, to `docker exec` processes and healthchecks.
docker run --rm --umask 077 <image> <command> [<arg>...]When reviewing an image’s supply-chain metadata, call the Docker Engine API endpoint to retrieve its in-toto attestations. Set `statement=true` to include verbatim statement bodies; optionally select a platform or filter by predicate type.
curl --unix-socket /var/run/docker.sock 'http://localhost/v1.55/images/<image>/attestations?statement=true'When creating a container with Docker Engine 29.5.0 or later, use the `local` logging driver and specify the label, environment, or tag options to include custom log attributes.
docker run -d --name <container> --env=<KEY>=<VALUE> --label=<KEY>=<VALUE> --log-driver=local --log-opt env=<KEY> --log-opt labels=<KEY> --log-opt labels-regex=<REGEX> --log-opt 'tag=<TEMPLATE>' <image>When creating a bind mount whose source directory may not exist, add the `bind-create-src` option to `docker run --mount`. Docker creates the source directory on the daemon host if needed.
docker run --mount type=bind,source=<host-path>,target=<container-path>,bind-create-src <image> [command...]