[DEV-5554] fix forks prs to avoid usage of large runners

Author: lwsanty

.github/workflows/push.yml

@@ -19,6 +19,23 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  check_membership:
+    name: Check membership
+    if: "!contains(github.event.head_commit.message, 'Bump version') || github.event_name != 'push'"
+    runs-on: ubuntu-22.04
+    outputs:
+      skip: ${{ steps.skip.outputs.skip }}
+    steps:
+      - uses: tspascoal/get-user-teams-membership@v1
+        id: membership
+        if: "github.actor != 'dependabot[bot]'"
+        with:
+          username: ${{ github.actor }}
+          team: 'team'
+          GITHUB_TOKEN: ${{ secrets.READ_ORG_TOKEN }}
+      - id: skip
+        if: "github.event_name == 'pull_request_target' && github.actor != 'dependabot[bot]' && steps.membership.outputs.isTeamMember == 'false'"
+        run: echo "skip=true" >> $GITHUB_OUTPUT
   static_checks:
     name: Static checks
     if: "!contains(github.event.head_commit.message, 'Bump version') || github.event_name != 'push'"
@@ -185,7 +202,8 @@ jobs:
         athenian/api/models/state/check_sdb_migrations.sh
   test:
     name: Test suite
-    if: "!contains(github.event.head_commit.message, 'Bump version') || github.event_name != 'push'"
+    needs: check_membership
+    if: "!contains(github.event.head_commit.message, 'Bump version') || github.event_name != 'push' && needs.check_membership.outputs.skip != 'true'"
     runs-on:
       # yes, we over-commit threads to cores x2
       labels: ubuntu-latest-32-cores
@@ -371,7 +389,8 @@ jobs:
         token: ${{ secrets.CODECOV_TOKEN }}
   test-extra:
     name: Additional tests
-    if: "!contains(github.event.head_commit.message, 'Bump version') || github.event_name != 'push'"
+    needs: check_membership
+    if: "!contains(github.event.head_commit.message, 'Bump version') || github.event_name != 'push' && needs.check_membership.outputs.skip != 'true'"
     runs-on: ubuntu-22.04
     concurrency:
       group: auth0-${{ github.actor }}-${{ matrix.type == 'user' && 'user' || github.head_ref || github.run_id }}-${{ matrix.db }}-${{ matrix.type }}