Worked on the espoon-voltti/luontotieto repository to enhance security automation and modernize CI/CD workflows over a two-month period. Introduced a GitHub Actions workflow leveraging YAML and JSON to enable CodeQL-based code security analysis, ensuring continuous scanning on pushes, pull requests, and a weekly schedule. Later, implemented Renovate Bot configuration to streamline dependency management, establishing update schedules, automerge rules, and module labeling while reducing CI noise by disabling unintended updates from Renovate and Dependabot. These changes improved the reliability and predictability of the CI/CD pipeline, with a focus on code security, DevOps practices, and robust dependency management processes.