Worked on security hardening for the qgds-bootstrap5 repository by refining the Chromatic CI workflow. Focused on enforcing least-privilege access during automated Chromatic builds, the update introduced a permissions block in the chromatic.yml configuration, restricting repository content access to read-only. This adjustment reduced the risk of over-privileged access within the CI/CD pipeline, aligning with best practices for secure automation. The change was delivered as a single, targeted commit to minimize disruption and maintain production stability. The work primarily involved editing YAML configuration files and leveraging GitHub Actions to enhance the repository’s security posture without introducing new features or instability.