Worked on the speakeasy-api/sdk-generation-action repository to implement signed commits for automated workflows, enhancing security and traceability in the SDK generation pipeline. Developed a feature-flag mechanism allowing teams to opt in to signed commits without disrupting existing processes. Updated GitHub Actions workflows and underlying Git utilities to support the creation and remote updating of signed commits, ensuring reproducibility and auditability of CI/CD artifacts. The solution was built using Go and YAML, leveraging skills in CI/CD and GitHub Actions. This work focused on improving artifact integrity and compliance in automated pipelines, with careful attention to minimizing impact on current workflows.