<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://cicd.deployment.to/agent-allowlist-shell-builtin-bypass/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-18</news:publication_date>
      <news:title>The command your agent approved is not the command that ran</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/aws-codepipeline-devops-agent-cloudwatch-webhook/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-18</news:publication_date>
      <news:title>AWS wires DevOps Agent into CodePipeline failures via CloudWatch and Lambda</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/cncf-buildpacks-graduation-source-to-image/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-18</news:publication_date>
      <news:title>Cloud Native Buildpacks graduates in the CNCF</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/kyaml-kubernetes-yaml-subset-manifests/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-17</news:publication_date>
      <news:title>KYAML pins down the YAML that Kubernetes actually reads</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/verification-gap-ai-generated-releases/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-17</news:publication_date>
      <news:title>AI writes releases faster than your test rig can pretend to grade them</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/zero-cves-default-floor-not-moat/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-17</news:publication_date>
      <news:title>Zero CVEs by default is a floor, not a moat</news:title>
    </news:news>
  </url>
</urlset>