Add GitHub Actions deploy workflow and Google Analytics tag

kolega-ai-dev · claude · kolega-ai-dev · commit 5eb23f674e0a · 2026-03-12T15:21:13.000Z
- CI/CD pipeline syncs reports/ to S3 + CloudFront invalidation on push to main
- Google Analytics (G-KJJ3ZH24H8) added to dashboard and scanner detail pages

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/deploy-dashboard.yml b/.github/workflows/deploy-dashboard.yml
@@ -0,0 +1,34 @@
+name: Deploy Dashboard to S3 + CloudFront
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'reports/**'
+
+  workflow_dispatch: # allow manual trigger
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ vars.AWS_DEPLOY_ROLE_ARN }}
+          aws-region: us-east-1
+
+      - name: Sync reports to S3
+        run: aws s3 sync reports/ s3://${{ vars.S3_BUCKET_NAME }}/ --delete
+
+      - name: Invalidate CloudFront cache
+        run: |
+          aws cloudfront create-invalidation \
+            --distribution-id ${{ vars.AWS_CLOUDFRONT_DISTRIBUTION_ID }} \
+            --paths "/*"
diff --git a/dashboard.py b/dashboard.py
@@ -697,6 +697,14 @@ def build_html(
     w('<meta charset="UTF-8">')
     w('<meta name="viewport" content="width=device-width, initial-scale=1.0">')
     w("<title>RealVuln Benchmark</title>")
+    w('<!-- Google tag (gtag.js) -->')
+    w('<script async src="https://www.googletagmanager.com/gtag/js?id=G-KJJ3ZH24H8"></script>')
+    w("<script>")
+    w("  window.dataLayer = window.dataLayer || [];")
+    w("  function gtag(){dataLayer.push(arguments);}")
+    w("  gtag('js', new Date());")
+    w("  gtag('config', 'G-KJJ3ZH24H8');")
+    w("</script>")
     w(f"<style>{_common_css()}</style>")
     w("</head>")
     w("<body>")
@@ -1007,6 +1015,14 @@ def build_scanner_detail_html(
     w('<meta charset="UTF-8">')
     w('<meta name="viewport" content="width=device-width, initial-scale=1.0">')
     w(f"<title>{display_name(scanner)} — RealVuln Scanner Detail</title>")
+    w('<!-- Google tag (gtag.js) -->')
+    w('<script async src="https://www.googletagmanager.com/gtag/js?id=G-KJJ3ZH24H8"></script>')
+    w("<script>")
+    w("  window.dataLayer = window.dataLayer || [];")
+    w("  function gtag(){dataLayer.push(arguments);}")
+    w("  gtag('js', new Date());")
+    w("  gtag('config', 'G-KJJ3ZH24H8');")
+    w("</script>")
     w(f"<style>{_common_css()}</style>")
     w("</head>")
     w("<body>")
diff --git a/reports/dashboard.html b/reports/dashboard.html
@@ -4,6 +4,14 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>RealVuln Benchmark</title>
+<!-- Google tag (gtag.js) -->
+<script async src="https://www.googletagmanager.com/gtag/js?id=G-KJJ3ZH24H8"></script>
+<script>
+  window.dataLayer = window.dataLayer || [];
+  function gtag(){dataLayer.push(arguments);}
+  gtag('js', new Date());
+  gtag('config', 'G-KJJ3ZH24H8');
+</script>
 <style>
 @import url('https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700&family=Inter:wght@400;500;600;700&family=Source+Code+Pro:wght@400;500;600&display=swap');
 
