Worked on the NGWPC/ngen repository to migrate and optimize its CI/CD workflow, focusing on automation and security. Developed a new pipeline using GitHub Actions that builds Docker images, runs unit tests, performs CodeQL static code analysis, and conducts container image scanning. Refactored the workflow for consistency and efficiency, introducing a setup job to compute image variables and consolidating build and push steps with docker/build-push-action. Implemented event-based conditional execution to handle pull requests and pushes differently, and enabled automated publishing of production images and tagged releases. Utilized Bash, YAML, and container security best practices throughout the process.