Worked on hardening the RPM publishing pipeline for the redpanda-data/connect repository, focusing on secure and auditable package delivery. Developed an end-to-end RPM signing workflow for GCP Artifact Registry, integrating build-time signing using nfpm and Goreleaser. Enhanced CI/CD processes by adding steps to securely prepare and export RPM signing keys, and implemented post-publish signature verification to ensure package integrity without relying on the system keyring. Updated YAML configuration files to support the new signing process and improved CI reliability by refining Bash scripts and test setups. Leveraged skills in DevOps, Golang, and package management to deliver robust automation.