diff --git a/README.md b/README.md
index adeedcb..c9ca96b 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,8 @@
 # Ceph OSD Replacement Analyzer
 
+[![Lint](https://code.lotusguild.org/LotusGuild/analyzeOSDs/actions/workflows/lint.yml/badge.svg)](https://code.lotusguild.org/LotusGuild/analyzeOSDs/actions?workflow=lint.yml)
+[![Security](https://code.lotusguild.org/LotusGuild/analyzeOSDs/actions/workflows/security.yml/badge.svg)](https://code.lotusguild.org/LotusGuild/analyzeOSDs/actions?workflow=security.yml)
+
 Advanced analysis tool for identifying optimal Ceph OSD replacement candidates based on multiple health, capacity, resilience, and performance factors.
 
 ## Overview
@@ -228,4 +231,14 @@ Internal use only - LotusGuild infrastructure tools.
 - Performance metrics integration
 - Color-coded output
 - Device class filtering
-- Minimum size filtering
\ No newline at end of file
+- Minimum size filtering
+
+## CI
+
+| Workflow | Purpose | Triggers |
+|---|---|---|
+| `lint.yml` | flake8 on all `.py` files | Every push and PR |
+| `security.yml` | bandit `-ll` (medium+ severity) | Every push, PR, and weekly Monday 6am |
+
+Branch protection is enabled on `main` — the lint check must pass before any PR can merge.
+Lint config: `.flake8` (max-line-length 120, E302/E303/W293/E501/F841/E261 ignored).
\ No newline at end of file