After a discussion in BBB, we agreed on the following:
One pipeline runs at every commit, but just builds a container and runs the unit tests. So you can quickly check, if you messed something up
One pipeline runs on a merge request with everything related to code. So build, test and integration tests. Licensing also runs, but only when a dependency is added or updated
Nightlys get removed, as they don't test new things. Only the security and compliance pipelines are run nightly to generate the statistics.
MR to develop pipeline with integration test
licensing only if go.mod or go.sum were edited
When exactly?
code quality -> currently on merge request only
controller test -> currently on merge request only