Developed and integrated a Code Security CI workflow for the homesengland/he-pipeline-assessment repository, focusing on automated code scanning and improved release processes. Leveraging GitHub Actions and YAML, the solution introduced CodeQL-based scanning for all pushes and pull requests to the main and develop branches, as well as scheduled scans to ensure continuous security monitoring. The implementation included updating the azure-pipelines-build-semver.yml file to increment the minor version, aligning build versioning with the new CI integration. This work enhanced the repository’s CI/CD governance by enabling proactive vulnerability detection, faster feedback on code quality, and stronger security gates within the deployment pipeline.