Thanks to its support of conditionals, Starlark solves a number of problems one might face when using .drone.yml in YAML format.
However, it would be great if Drone had a means to sign .drone.star and thereby protect the repository in question like with .drone.yml–e.g. by adding a comment (block) at the end of the file containing the necessary hmac.
(Also, it currently does not seem possible to look at the underlying original/converted .drone.xxx definition of an associated build in the browser which would make it easier to quickly check whether it (still) makes sense to rerun/debug said build in case of concurrent changes, especially if both .drone.yml and .drone.star exist.)
see my comment on this topic at http://discuss.harness.io/t/how-can-i-sign-starlark-or-jsonnet-configs/8001/4