Worked on the HubSpot/vitess repository to enhance the security of its CI/CD pipeline by implementing Personal Access Token (PAT) authentication within the sync_vitessio GitHub Actions workflow. This update focused on reducing the token surface area and enforcing least-privilege access, thereby improving the reliability and auditability of automated repository checkouts. The work leveraged YAML for workflow configuration and utilized CI/CD best practices alongside GitHub Actions to enable more granular permission control. No major bugs were addressed during this period, as efforts were concentrated on strengthening workflow security and governance to support safer, more transparent deployment processes for the project.