Worked on the firecracker-microvm/firecracker repository to enhance security and reliability of continuous integration workflows. Focused on implementing least-privilege scoping for GitHub Token permissions within GitHub Actions, using YAML to define per-workflow access controls. This approach ensured that each workflow only accessed the resources necessary for its function, reducing the potential blast radius in case of a security incident. The changes aligned the repository’s CI/CD processes with established security and governance standards. Leveraged DevOps practices and security best practices to strengthen the overall security posture, prioritizing risk reduction and compliance without impacting workflow efficiency or maintainability.