Require green CI before deploy

Require green CI before deploy | BeforeMerge Rules | BeforeMerge

Why this matters

CI is only protective if deploy depends on it. Wiring the deploy job to require the passing build/test/scan run ensures nothing reaches an environment that hasn't been verified.

Bad

deploy: { needs: [] }   # deploys regardless of CI result

Good

deploy:
  needs: [build, test, scan]   # only runs if all pass
  if: ${{ success() }}

Why This Matters

Related Rules

Catch this automatically on every PR

Why this matters