How to run a job after MR is approved, but reject MR, if the job failed?

Question

I would like some automated checks were done after MR is approved, because for those checks pipeline has to access protected variables.

If these checks fail, MR shoul