<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://cicd.deployment.to/codeql-2-26-2-swift-kotlin-sanitizer-trim/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-10</news:publication_date>
      <news:title>CodeQL 2.26.2 trims what counts as safe: fresh alerts incoming</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/docker-captain-governance-dx-argument/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-09</news:publication_date>
      <news:title>&apos;Governance is a developer experience problem&apos;: a Docker Captain reframes AI-agent trust</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/github-stacked-pull-requests-preview/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-09</news:publication_date>
      <news:title>GitHub&apos;s native stacked pull requests land in public preview</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/shadow-ai-cicd-cncf-threat-model/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-09</news:publication_date>
      <news:title>CNCF&apos;s shadow-AI post makes the case for treating agents as identities</news:title>
    </news:news>
  </url>
</urlset>