turns out we do NEED the step

Author: pront

.github/workflows/integration.yml

@@ -84,12 +84,23 @@ jobs:
     if: ${{ needs.check-all.outputs.should_run == 'true' }}
     outputs:
       can_access_secrets: ${{ steps.secret_access_check.outputs.can_access_secrets }}
-    env:
-      DATADOG_CI_APP_ID: ${{ secrets.GH_APP_DATADOG_VECTOR_CI_APP_ID }}
     steps:
       - uses: actions/checkout@v4
+
+      - name: Determine if secrets are defined (PR author is team member)
+        id: secret_access_check
+        if: github.event_name == 'pull_request'
+        env:
+          GH_APP_DATADOG_VECTOR_CI_APP_ID: ${{ secrets.GH_APP_DATADOG_VECTOR_CI_APP_ID }}
+        run: |
+          if [[ "$GH_APP_DATADOG_VECTOR_CI_APP_ID" != "" ]] ; then
+            echo "can_access_secrets=true" >> $GITHUB_OUTPUT
+          else
+            echo "can_access_secrets=false" >> $GITHUB_OUTPUT
+          fi
+
       - name: Run setup steps required by the IT suite
-        if: ${{ github.event_name == 'merge_group' || env.DATADOG_CI_APP_ID }}
+        if: ${{ github.event_name == 'merge_group' || steps.check.outputs.can_access_secrets == 'true' }}
         run: |
           sudo npm -g install @datadog/datadog-ci
           sudo -E bash scripts/ci-free-disk-space.sh
@@ -100,9 +111,7 @@ jobs:
     needs:
       - changes
       - setup
-    env:
-      DATADOG_CI_APP_ID: ${{ secrets.GH_APP_DATADOG_VECTOR_CI_APP_ID }}
-    if: ${{ github.event_name == 'merge_group' || env.DATADOG_CI_APP_ID }}
+    if: ${{ needs.setup.outputs.can_access_secrets == 'true' || github.event_name == 'merge_group' }}
     strategy:
       matrix:
         # TODO: Add "splunk" back once https://github.com/vectordotdev/vector/issues/22379 is fixed.