- CodeQL: Python security analysis on push/PR + weekly schedule - Pre-commit: ruff lint/format checks on push/PR - Labeler: auto-label PRs based on changed files