Worked on the dave-inc/charts repository to enhance the CI/CD pipeline by introducing a security-focused feature that pins third-party GitHub Actions, such as checkout and chart-releaser, to specific commit SHAs. This approach, implemented using YAML and leveraging GitHub Actions, ensured that the release process consistently used tested and verified versions of dependencies, reducing the risk of unexpected changes and vulnerabilities. The work focused on improving release governance, enabling auditable and reproducible builds, and supporting compliance requirements. No bugs were addressed during this period, as the primary emphasis was on process improvement and strengthening the reliability of automated deployments.