Developed and integrated an automated vulnerability scanning workflow for the svix/svix-webhooks repository, focusing on enhancing security within the CI/CD pipeline. Leveraging Docker and YAML, the solution incorporated Grype to scan built images for high-severity vulnerabilities before allowing registry pushes. The process established a security gate that automatically fails builds if vulnerabilities are detected, ensuring only clean images are published. This approach reduced the risk of deploying insecure artifacts and streamlined compliance with security standards. The work demonstrated a strong grasp of DevOps practices, continuous integration, and security scanning, with all changes tracked and documented through version control and commit references.