diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 442a126ddd1cd9ab410db6f6b78563d3ae6d883d..e96270f5bf3a81caea4cf2f9a1f89f3aeb53e1a3 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -30,6 +30,7 @@ check:
     - echo -n "${ANSIBLE_VAULT_PASSWORD}" > .ansible_vault_pw
     - export ANSIBLE_VAULT_PASSWORD_FILE=.ansible_vault_pw
     - with-ssh-key ansible-playbook -i hosts.ini --diff --check site.yml
+    - grep changed= ansible.log | grep -v changed=0 && false
   artifacts:
     paths:
       - ansible.log