Catch if exit_fail does not contain risk

[phracek]

We should be able to detect if module finish with risk and no risk is used.
preupg-xccdf-compose and preupg-create-group-xml scripts should print out some information.

[pirat89]

That doesn't make sense to me. I think that make static analysis of bash + python scripts is overkill.

[AloisMahdal]

@pirat89 +1

API usage and similar checks could be useful but IMO belong in a dedicated tool -- some kind of "preupg-lint". And I can imagine it requires huge amount of work just to make them barely useful.

Regarding stuff like "risk-less" exit_fail, though, long-term it would be better to work towards getting rid of these "dependencies". (Eg. not require exit_ at all, just infer result from messages/risks.)

[bocekm]

PR #218 will handle the "risk-less" exit_fail case - the module result changes from fail to error and a message about that is logged.