Developed a unified DevOps workflow for the h2oai/h2o-3 repository, integrating vulnerability scanning directly into the CI/CD process to streamline secure releases and reduce manual intervention. Leveraged YAML and GitHub Actions to automate vulnerability scans on code pushes and enable on-demand scans, while also hardening access controls through improved authentication and scoped permissions. The work replaced a legacy scanning approach with a consolidated workflow that triggers both DevOps processes and security checks, enhancing maintainability and feedback cycles. Focused on workflow automation and security, the implementation improved operational efficiency and ensured that security practices are embedded throughout the development lifecycle.