Developed and integrated a security scanning workflow for the platform9/vjailbreak repository, focusing on early detection of vulnerabilities within the codebase. Leveraging Gosec and Trivy, the workflow was implemented using Go and YAML, and designed to run automatically on both push and pull request events. This approach embedded security checks directly into the CI/CD pipeline, providing rapid feedback on code changes and strengthening the project’s security posture. The configuration was structured for maintainability, enabling straightforward updates and onboarding for future contributors, and established a foundation for ongoing security governance within the development process without introducing additional bugs.