Developed and integrated a release-triggered Cargo vulnerability scanning workflow for the worldcoin/orb-software repository, focusing on enhancing security automation and CI/CD reliability. The solution moved vulnerability scanning entirely inside the repository using GitHub Actions and YAML, eliminating external dependencies and improving reproducibility. Automated scans are triggered on release publication, with results uploaded as SARIF reports to the security dashboard and actionable remediation artifacts generated from the released Cargo.lock. The workflow leverages Python and DevOps practices to produce prioritized update reports and summary tables, supporting maintainability and audit readiness while collaborating through co-authored commits to strengthen governance and security posture.