diff --git a/.cirrus.yml b/.cirrus.yml
index 430b523095..6e7b6a5cfa 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -79,6 +79,31 @@ build_task:
     cpu: 4
 
   <<: *ONLY_SONARSOURCE_QA
+  env:
+    # analysis on next
+    SONAR_TOKEN: dummy-value
+    SONAR_HOST_URL: dummy-value
+    #allow deployment of pull request artifacts to repox
+    DEPLOY_PULL_REQUEST: true
+    CIRRUS_CLONE_DEPTH: 50
+    SIGN_KEY: VAULT[development/kv/data/sign data.key]
+    PGP_PASSPHRASE: VAULT[development/kv/data/sign data.passphrase]
+  maven_cache:
+    folder: ${CIRRUS_WORKING_DIR}/.m2/repository
+  build_script:
+    - source cirrus-env BUILD
+    - regular_mvn_build_deploy_analyze -DskipTests=true -Dsonar.skip=true -P-typeshed_serializer
+    - ./check-license-compliance.sh
+  cleanup_before_cache_script: cleanup_maven_repository
+
+test_analyze_task:
+  depends_on:
+    - build
+  <<: *BUILD_CONTAINER_DEFINITION
+  eks_container:
+    cpu: 4
+    memory: 4G
+  <<: *ONLY_SONARSOURCE_QA
   env:
     # analysis on next
     SONAR_TOKEN: VAULT[development/kv/data/next data.token]
@@ -95,10 +120,9 @@ build_task:
     - cd python-frontend/typeshed_serializer/resources/python-type-stubs
     - git sparse-checkout set stubs/sklearn
     - git checkout
-  build_script:
+  analyze_script:
     - source cirrus-env BUILD
-    - regular_mvn_build_deploy_analyze -DfailStubGenerationFast=true
-    - ./check-license-compliance.sh
+    - PULL_REQUEST_SHA=$GIT_SHA1 regular_mvn_build_deploy_analyze -DfailStubGenerationFast=true -P-deploy-sonarsource,-release,-sign -Dmaven.deploy.skip=true -Dskip.its=true -Dsonar.analysisCache.enabled=true
   cleanup_before_cache_script: cleanup_maven_repository
 
 build_win_task:
@@ -215,6 +239,7 @@ pr_analysis_qa_task:
 
 promote_task:
   depends_on:
+    - test_analyze
     - ruling
     - plugin_qa
     - ws_scan