test

Author: haritamar

.github/workflows/test-all-warehouses.yml

@@ -1,6 +1,6 @@
 name: Test all warehouse platforms
 on:
-  pull_request_target:
+  pull_request:
     branches: ["master"]
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
@@ -41,22 +41,8 @@ jobs:
           fromJSON('["latest_official"]') }}
         warehouse-type:
           [
-            postgres,
-            snowflake,
-            bigquery,
-            redshift,
-            databricks_catalog,
-            athena,
-            trino,
-            clickhouse,
-            dremio,
+            postgres
           ]
-        include:
-          # If we're not running on a specific dbt version, then always add postgres on 1.8.0
-          - dbt-version: "${{ inputs.dbt-version || '1.8.0' }}"
-            warehouse-type: postgres
-          - dbt-version: "${{ inputs.dbt-version || 'latest_pre' }}"
-            warehouse-type: postgres
     uses: ./.github/workflows/test-warehouse.yml
     with:
       warehouse-type: ${{ matrix.warehouse-type }}

.github/workflows/test-warehouse.yml

@@ -53,9 +53,25 @@ env:
   TESTS_DIR: ${{ github.workspace }}/dbt-data-reliability/integration_tests
 
 jobs:
+  detect-fork:
+    runs-on: ubuntu-latest
+    outputs:
+      requires_approval: ${{ steps.set-output.outputs.requires_approval }}
+    steps:
+      - name: Set fork output
+        id: set-output
+        run: |
+          if [[ "${{ github.event_name }}" == "pull_request_target" && "${{ github.event.pull_request.head.repo.full_name }}" != "${{ github.repository }}" ]]; then
+            echo "requires_approval=true" >> $GITHUB_OUTPUT
+          else
+            echo "requires_approval=false" >> $GITHUB_OUTPUT
+          fi
+
   test:
     runs-on: ubuntu-latest
-    environment: elementary_test_env # This is a github environment (not to be confused with env vars)
+    needs: [detect-fork]
+    # PRs from forks require approval - so we use an environment that requires an approver from the team.
+    environment: ${{ (needs.detect-fork.outputs.requires_approval == 'true' && 'elementary_test_env') || '' }}
     concurrency:
       # This is what eventually defines the schema name in the data platform.
       group: tests_${{ inputs.warehouse-type }}_dbt_${{ inputs.dbt-version }}_${{ github.head_ref || github.ref_name }}