Worked on CI/CD security hardening and automation workflow improvements for the marshmallow-insurance/smores-react repository. Focused on reducing operational risk and improving release reliability, the work involved pinning third-party GitHub Actions to specific commit SHAs using YAML, ensuring deterministic builds and preventing tampering. Updated key actions such as dependabot/fetch-metadata and JamesIves/github-pages-deploy-action to known-good versions, further strengthening supply chain security. Streamlined the Dependabot auto-approval process by adopting the GitHub CLI for approvals and merges, which reduced reliance on external actions and simplified updates. These changes resulted in more auditable, reliable, and efficient CI/CD release automation.