Developed a security automation enhancement for the magic-js repository by replacing the existing DeepSource configuration with a Gitleaks-based workflow. This update introduced automated secret scanning on both pull requests and pushes, leveraging GitHub Actions to integrate the process directly into the CI pipeline. Configuration was managed using TOML and YAML, with custom .gitleaks.toml and .gitleaksignore files to fine-tune detection and reduce false positives. Slack notifications were implemented to immediately alert developers of potential secret exposures, streamlining incident response. Deprecated configuration files were removed to simplify maintenance, resulting in a more robust and responsive security posture for the project.