Worked on security hardening for the codacy/codacy-cli-v2 repository, focusing on improving the reliability and safety of its CI/CD pipeline. Addressed supply chain risks in GitHub Actions workflows by replacing mutable action references with immutable SHA hashes, ensuring that workflows only use vetted versions and preventing unintended updates. This approach aligned with industry security guidance and enhanced reproducibility in the build process. The work was implemented using YAML and leveraged DevOps and security best practices. No major bugs were addressed during this period, as the primary focus remained on strengthening workflow security and maintaining robust CI/CD operations.