require that the user be able to :read_build

to get a pipeline_failed email

app/services/notification_service.rb

@@ -309,7 +309,8 @@ class NotificationService
     recipients ||= NotificationRecipientService.notifiable_users(
       [pipeline.user], pipeline.project, :watch,
       custom_action: :"#{pipeline.status}_pipeline",
-      read_ability: :read_pipeline,
+      read_ability: :read_build,
+      target: pipeline
     ).map(&:notification_email)
 
     if recipients.any?