Nikita Jare enhanced the security of the canonical/oci-factory repository by developing rock signature verification for Airflow builds, ensuring that only authenticated components are incorporated into production workflows. Leveraging Python and YAML within a containerized DevOps environment, Nikita addressed supply chain risks by integrating signature-based validation and updating release end-of-life management. The work included expanding vulnerability coverage through Trivy CVE management, specifically by adding protobuf to .trivyignore to mitigate emerging threats. Automated CI pipelines were retriggered to validate these changes, resulting in improved auditability and regulatory readiness. The project demonstrated depth in security hardening and release governance practices.