Worked on the alma/alma-woocommerce-gateway repository, focusing on security hardening and reliability improvements within the CI/CD pipeline. Addressed a vulnerability in the continuous integration workflow by pinning the SonarQube GitHub Action to a specific commit, thereby reducing exposure to supply chain risks associated with unpinned dependencies. Emphasized maintaining pipeline stability and consistent release velocity by avoiding risky changes on the master branch. Utilized YAML for workflow configuration and leveraged GitHub Actions to enforce stronger security governance and code quality checks. No new customer-facing features were delivered during this period, with efforts concentrated on backend infrastructure and process resilience.