Copilot is genuinely good at GitHub Actions YAML. It knows the schema, it remembers the syntax you always look up, and it will produce a working workflow faster than you will. It is also fluent in every insecure pattern on GitHub, because those patterns are all over its training data.
Source: [Dev.to](https://dev.to/jjoyneriv/copilot-writes-your-github-actions-workflow-here-are-the-4-things-it-gets-wrong-5l3)