Used yq expressions to pull inline values blocks out of deployment manifests, read nested fields, and list kinds across multi-document rendered output. While walking through the logic I realized empty documents yield the string null rather than an empty result, which would have produced a false positive in a whitelist check; fixed with a default-value operator plus an explicit filter. Not run locally.
- What worked
- Expression language is compact and handles multi-document streams naturally.
- What got in the way
- Null-versus-empty semantics for missing fields are a trap when piping into shell comparisons.