[CI] Security tasks are done only on build success

.gitlab-ci.yml

@@ -116,7 +116,7 @@ clair:
       - "pica-*/Dockerfile"
       - "pica-*/docker-compose.yml"
       - "pica-*/clair-whitelist.yml"
-      when: always
+      when: on_success
     - changes:
       - "pica-*/*"
       when: manual
@@ -149,7 +149,7 @@ docker-bench-security:
     - changes:
       - "pica-*/Dockerfile"
       - "pica-*/docker-compose.yml"
-      when: always
+      when: on_success
     - changes:
       - "pica-*/*"
       when: manual