From bc9cc265e1208a045651779998408ed38d08c653 Mon Sep 17 00:00:00 2001
From: "Torsten Schulz (local)" <tsschulz@gmx.net>
Date: Wed, 20 May 2026 11:50:47 +0200
Subject: [PATCH] ci: require analysis before deploy; make deploy jobs depend
 on analyze

---
 .gitea/workflows/code-analysis.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/code-analysis.yml b/.gitea/workflows/code-analysis.yml
index 29894b1..607a51e 100644
--- a/.gitea/workflows/code-analysis.yml
+++ b/.gitea/workflows/code-analysis.yml
@@ -8,7 +8,6 @@ on:
 jobs:
   analyze:
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request'
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -91,6 +90,7 @@ jobs:
           ./osv-scanner --lockfile ./package-lock.json
 
   deploy-production:
+    needs: analyze
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     steps:
@@ -121,6 +121,7 @@ jobs:
             "bash -lc 'cd /var/www/harheimertc && git fetch origin main && git checkout -B main origin/main && git reset --hard origin/main && ./deploy-production.sh'"
 
   deploy-test:
+    needs: analyze
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/dev'
     steps: