<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Upwarden Blog</title><description>Supply-chain security field notes from the Upwarden team.</description><link>https://upwarden.io/</link><item><title>Two lines to close your CI&apos;s supply-chain door</title><link>https://upwarden.io/blog/setup-upwarden-keyless-ci-supply-chain/</link><guid isPermaLink="true">https://upwarden.io/blog/setup-upwarden-keyless-ci-supply-chain/</guid><description>setup-upwarden is now on the GitHub Marketplace — the google-github-actions/auth for software supply-chain security. Keyless OIDC, every dependency fetch authenticated, attributed, and policy-enforced.</description><pubDate>Fri, 17 Jul 2026 00:00:00 GMT</pubDate></item></channel></rss>