update CI so that we share screts when PR is approved

Author: technophile-04

.github/workflows/test-app.yaml

@@ -4,16 +4,27 @@ on:
   push:
     branches:
       - main
-  pull_request:
-    branches:
-      - main
+  pull_request_target:
+    types: [opened, synchronize]
 
 jobs:
+  access_check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check user permissions
+        if: ${{ github.event_name == 'pull_request' && github.event.pull_request.author_association != 'MEMBER' }}
+        run: |
+          echo "Action was not triggered by an organization member. Exiting now."
+          exit 1
+
   cypress-run:
     runs-on: ubuntu-latest
+    needs: access_check
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Cypress run
         uses: cypress-io/github-action@v6
@@ -25,4 +36,3 @@ jobs:
         env:
           NEXT_PUBLIC_HEIMDALL_URL: "${{ secrets.HEIMDALL_URL }}"
           CYPRESS_HEIMDALL_URL: "${{ secrets.HEIMDALL_URL }}"
-