<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://cicd.deployment.to/gitlab-duo-agent-flows-inherit-controls/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-07-17</news:publication_date>
      <news:title>GitLab packages Duo Agent Flows so multi-step runs share the platform&apos;s controls</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/code-scanning-ai-alerts-pr-review/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-07-16</news:publication_date>
      <news:title>GitHub tags AI-generated code scanning alerts on the PR itself</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/cordyceps-untrusted-pr-workflow-hijack/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-07-16</news:publication_date>
      <news:title>Cordyceps: when a stranger&apos;s pull request runs as a maintainer</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/vault-kubernetes-kms-etcd-beta/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-07-16</news:publication_date>
      <news:title>Vault Kubernetes KMS enters public beta, aiming at the etcd key sprawl</news:title>
    </news:news>
  </url>
</urlset>