Developed and integrated an automated secret scanning workflow for the tinyfish-io/agentql repository, focusing on enhancing security within the CI/CD pipeline. Leveraging GitHub Actions and YAML, the solution incorporated TruffleHog to scan pull requests for leaked secrets before merging, establishing a security gate that reduces the risk of credential exposure. This approach automated compliance with secure coding practices and streamlined the code review process by embedding security checks directly into PR workflows. The work demonstrated practical skills in CI/CD orchestration, secrets management, and security scanning, resulting in a more robust and secure development lifecycle without requiring major bug fixes.