Developed and delivered security hardening for command execution in the nektos/act repository, focusing on reducing the attack surface within the runner’s execution environment. The approach involved restricting the use of insecure commands, allowing them only in explicitly whitelisted scenarios to maintain compliance with safe execution practices while preserving approved workflows. This work was implemented in Go, leveraging backend development and testing skills to ensure robust enforcement of the new restrictions. The contribution enhanced the safety and reliability of continuous integration workflows by minimizing risk without disrupting existing processes, and was merged via a forked commit co-authored with another contributor.