diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 750701ac7ba419741b129c20ab36781e6617cf15..95ae5a68aab45b0a4d2e377253199f24eacd72fd 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -27,12 +27,12 @@ check:
     - allow_failure: true
   script:
     - pipenv check
+      --ignore 39462
+  # Ignore CVE #39462 until next version of Tornado and/or Python.
+  # See discussion at https://github.com/tornadoweb/tornado/issues/2981.
 
 build:artifact:
   stage: package
-  rules:
-    - if: $CI_MERGE_REQUEST_IID
-      when: never
   script:
     - pipenv run mkdocs build
   artifacts:
@@ -49,9 +49,6 @@ build:image:
     REGISTRY_USERNAME: $CSUI_REGISTRY_USERNAME
     REGISTRY_PASSWORD: $CSUI_REGISTRY_PASSWORD
     IMAGE_TAG: latest
-  rules:
-    - if: $CI_MERGE_REQUEST_IID
-      when: never
   before_script:
     - export REGISTRY_AUTH=$(printf $REGISTRY_USERNAME:$REGISTRY_PASSWORD | base64)
     - printf "{\"auths\":{\"$REGISTRY_SERVER\":{\"auth\":\"$REGISTRY_AUTH\"}}}" > /kaniko/.docker/config.json