Private registries

AgentBox can build a template from a private OCI image. Pass credentials through environment variables or your application's secret store. Do not commit them to the repository.

Username and password

Call Template().fromImage(image, { username, password }).

AWS ECR

Use fromAWSRegistry(image, { accessKeyId, secretAccessKey, region }).

Google Artifact Registry

fromGCPRegistry accepts serviceAccountJSON as an object or a path to a JSON file.

The credentials are used only to pull the base image. They do not become environment variables in the resulting sandbox.