Developed a security-focused CI/CD enhancement for the google/adk-python repository by implementing a Fork Guard to protect sensitive secrets during automated workflows. Leveraging YAML and DevOps best practices, the solution restricted automated pr-triage runs to same-repository pull requests, effectively blocking untrusted fork PRs from accessing privileged API keys and CI secrets. The approach maintained maintainers’ ability to trigger workflows manually via workflow_dispatch, ensuring operational flexibility without compromising security. This targeted patch reduced the risk exposure for open source contributions and demonstrated a secure-by-default mindset, all while minimizing changes to the existing pipeline and preserving core CI/CD functionality.