ci: require analysis before deploy; make deploy jobs depend on analyze

.gitea/workflows/code-analysis.yml

@@ -8,7 +8,6 @@ on:
 jobs:
   analyze:
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request'
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -91,6 +90,7 @@ jobs:
           ./osv-scanner --lockfile ./package-lock.json
 
   deploy-production:
+    needs: analyze
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     steps:
@@ -121,6 +121,7 @@ jobs:
             "bash -lc 'cd /var/www/harheimertc && git fetch origin main && git checkout -B main origin/main && git reset --hard origin/main && ./deploy-production.sh'"
 
   deploy-test:
+    needs: analyze
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/dev'
     steps: