always run malware scan first

.github/workflows/deploy.yml

@@ -1,15 +1,16 @@
 name: Deploy Stacks
 
 on:
-  push:
+  workflow_run:
+    workflows: ["Malware & Obfuscation Scan"]
+    types: [completed]
     branches:
       - main
       - dev
       - staging
-  workflow_dispatch:
 
 concurrency:
-  group: deploy-${{ github.ref_name }}
+  group: deploy-${{ github.event.workflow_run.head_branch || github.ref_name }}
   cancel-in-progress: true
 
 jobs:
@@ -38,9 +39,10 @@ jobs:
           - project: edr-passenger
             build_env_file: passenger-web.build.env
             service: passenger-backoffice
+    if: github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success'
     env:
       PROJECT: ${{ matrix.project }}
-      BRANCH: ${{ github.ref_name }}
+      BRANCH: ${{ github.event.workflow_run.head_branch || github.ref_name }}
       DEPLOY_USER: tria
       BUILD_ENV_FILE: ${{ matrix.build_env_file }}
       DOCKER_BUILDKIT: "1"