diff --git a/README.md b/README.md
index cca1516..db26c06 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,8 @@
 # System Health Monitoring Daemon
 
+[![Lint](https://code.lotusguild.org/LotusGuild/hwmonDaemon/actions/workflows/lint.yml/badge.svg)](https://code.lotusguild.org/LotusGuild/hwmonDaemon/actions?workflow=lint.yml)
+[![Security](https://code.lotusguild.org/LotusGuild/hwmonDaemon/actions/workflows/security.yml/badge.svg)](https://code.lotusguild.org/LotusGuild/hwmonDaemon/actions?workflow=security.yml)
+
 A robust system health monitoring daemon that tracks hardware status and automatically creates tickets for detected issues.
 
 ## Features
@@ -158,3 +161,13 @@ python3 hwmonDaemon.py --dry-run
 ## Security Note
 
 Ensure proper network security measures are in place as the service downloads and executes code from a specified URL.
+
+## CI
+
+| Workflow | Purpose | Triggers |
+|---|---|---|
+| `lint.yml` | flake8 on all `.py` files | Every push and PR |
+| `security.yml` | bandit `-ll` (medium+ severity) | Every push, PR, and weekly Monday 6am |
+
+Branch protection is enabled on `main` — the lint check must pass before any PR can merge.
+Lint config: `.flake8` (max-line-length 120, F841/E501 ignored).