TLDR Web Dev · OPINIONS & ADVICE
DEAR GITHUB: NO YAML ANCHORS, PLEASE
Summary from the TLDR Web Dev newsletter
This dev isn't a fan of GitHub's recent addition of YAML anchor support to GitHub Actions. YAML anchors are redundant, complicate workflow comprehension for both humans and machines, and don't have any unique utility due to the absence of merge key support in GitHub Actions. This change makes it harder to analyze workflows for vulnerabilities, thereby worsening GitHub Actions' security.