Gagan worked on security hardening for the dapr/dapr repository’s continuous integration workflows, focusing on restricting GitHub Actions token permissions to the minimum required. By updating YAML workflow files such as backport.yaml and sync-release-branch.yaml, Gagan introduced top-level permissions and implemented an empty permissions object in the backport workflow, aligning with least-privilege security principles. This approach reduced the CI blast radius and improved the repository’s OpenSSF Scorecard Token-Permissions rating without disrupting release processes. The work demonstrated practical application of DevOps and CI/CD best practices, with a strong emphasis on workflow configuration and cross-team collaboration to enhance overall security posture.