Dummu - Security Note in YAML

This is the kind of gap that slips through review because the happy path looks completely normal.

Why this matters for YAML

This is a bold claim, an italic aside, and an underlined point, all in one YAML example.

What it touches:

• The YAML runtime or interpreter
• Whatever calls the code around it
• Anyone reading this six months from now

How to apply it:

1. Read the snippet below once, slowly.
2. Try changing one value and predict the output before running it.
3. Compare your prediction against what actually happens.

"None of this is exotic. It is just easy to forget under deadline pressure."

steps:
  - name: install
    run: npm ci
  - name: test
    run: npm test

Reference: YAML documentation

None of this is exotic. It is just easy to forget under deadline pressure.