k3nny
54b5850835
Add rule GL033 that warns when every rule in a job's rules: block has an explicit when: never, making the job permanently excluded from any pipeline run. This is a pure static check — no if: evaluation or context required. Only rules with literal when: never trigger it; rules with no when: (defaults to on_success), when: manual, when: always, or when: on_failure are treated as reachable. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
60 lines
1.5 KiB
YAML
60 lines
1.5 KiB
YAML
---
|
|
# dead_rules.yml
|
|
# Exercises GL033: rules: block where every rule has when: never.
|
|
# All flagged jobs produce a WARNING (exit 0). Valid jobs must not be flagged.
|
|
|
|
stages:
|
|
- build
|
|
- test
|
|
- deploy
|
|
|
|
# ── Jobs that should trigger GL033 ─────────────────────────────────────────
|
|
|
|
# Single bare catch-all never — job is always excluded.
|
|
disabled-job:
|
|
stage: build
|
|
script: echo disabled
|
|
rules:
|
|
- when: never
|
|
|
|
# Multiple rules, all when: never — no branch can activate this job.
|
|
dead-multi:
|
|
stage: test
|
|
script: echo dead
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "main"'
|
|
when: never
|
|
- if: '$CI_COMMIT_BRANCH == "develop"'
|
|
when: never
|
|
- when: never
|
|
|
|
# ── Jobs that must NOT trigger GL033 ───────────────────────────────────────
|
|
|
|
# First rule can activate.
|
|
main-only:
|
|
stage: build
|
|
script: echo main
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "main"'
|
|
when: on_success
|
|
- when: never
|
|
|
|
# Rule with no when: — defaults to on_success, so job is reachable.
|
|
implicit-on-success:
|
|
stage: test
|
|
script: echo implicit
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "develop"'
|
|
|
|
# Manual is not never — job is reachable (just gated).
|
|
manual-gate:
|
|
stage: deploy
|
|
script: echo deploy
|
|
rules:
|
|
- when: manual
|
|
|
|
# No rules at all — always active.
|
|
always-active:
|
|
stage: build
|
|
script: echo always
|