mcp-server-semgrep/semgrep-rules/yaml/gitlab/correctness/changes-with-when-never.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
  - id: changes-with-when-never
    pattern: |
      - changes:
        - ...
        when: never
    message: >-
      This Gitlab CI YAML will never run on default branches due to a `changes` rule with `when:never`.
      To fix this, make sure the triggering event is a push event. You can do this with `if: '$CI_PIPELINE_SOURCE == "push"'`.
      See https://docs.gitlab.com/ee/ci/yaml/index.html#ruleschanges
    metadata:
      category: correctness
      technology:
        - gitlab
        - gitlab-ci
    languages: [yaml]
    severity: WARNING