1 files changed, 35 insertions, 0 deletions
diff --git a/src/ansiblelint/rules/risky_shell_pipe.md b/src/ansiblelint/rules/risky_shell_pipe.md
new file mode 100644
index 0000000..0c222a9
--- /dev/null
+++ b/src/ansiblelint/rules/risky_shell_pipe.md
@@ -0,0 +1,35 @@
+# risky-shell-pipe
+
+This rule checks for the bash `pipefail` option with the Ansible `shell` module.
+
+You should always set `pipefail` when piping output from a command to another.
+The return status of a pipeline is the exit status of the command.
+The `pipefail` option ensures that tasks fail as expected if the first command fails.
+
+## Problematic Code
+
+```yaml
+---
+- name: Example playbook
+  hosts: localhost
+  tasks:
+    - name: Pipeline without pipefail
+      shell: false | cat
+```
+
+## Correct Code
+
+```yaml
+---
+- name: Example playbook
+  hosts: localhost
+  become: no
+  tasks:
+    - name: Pipeline with pipefail
+      shell: set -o pipefail && false | cat
+
+    - name: Pipeline with pipefail, multi-line
+      shell: |
+        set -o pipefail # <-- adding this will prevent surprises
+        false | cat
+```