If you let your agent use docker you've basically given it root on your machine.

I use podman btw

Its aliased to docker

Building a project as a container and giving an agent access to running docker commands are different things.