<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://cicd.deployment.to/arrayref-rust-crate-supply-chain-attack/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-22</news:publication_date>
      <news:title>The arrayref takeover is the crates.io threat model, not a surprise</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/codex-cli-versioned-pipeline-step/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-22</news:publication_date>
      <news:title>Codex CLI arrives as a repo-versioned pipeline step</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/github-org-rule-insights-public-preview/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-22</news:publication_date>
      <news:title>GitHub takes rule insights up a level: bypass counts across the whole org</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/docker-sandboxes-github-agentic-workflows/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-21</news:publication_date>
      <news:title>Docker Sandboxes plug into GitHub Agentic Workflows as an agent runtime</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/github-monthly-commit-scale-ci-strain/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-21</news:publication_date>
      <news:title>GitHub says 2.9 billion commits a month, and CI is the downstream tenant</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/isolated-vm-transferlist-sandbox-escape/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-21</news:publication_date>
      <news:title>isolated-vm ships a sandbox escape, and the migration story catches up with itself</news:title>
    </news:news>
  </url>
</urlset>