Worked on the grafana/grafana-llm-app repository to enhance the security of the version-bump workflow by implementing Vault-scoped secrets, focusing on reducing the exposure of sensitive credentials during CI/CD processes. Leveraged YAML and GitHub Actions to refactor the workflow so that credentials are now retrieved at the step level rather than being available job-wide, aligning with established security best practices. This approach preserved the existing token minting flow, ensuring no user-facing changes or regressions, while improving auditability and limiting environment leakage. The work demonstrated a methodical application of CI security patterns to support safer automated versioning within the repository.