GitHub Actions' YAML Anchors: A Step Backwards?

2025-09-22

GitHub Actions recently added support for YAML anchors, a move the author argues is a step backward. The article contends that YAML anchors are redundant with existing functionality, increase the complexity of the data model, making CI/CD harder for both humans and machines to understand. Furthermore, GitHub's lack of support for merge keys renders YAML anchors' unique use case ineffective. The author believes this makes GitHub Actions more difficult to analyze for security vulnerabilities and recommends GitHub immediately remove support for YAML anchors.

Development