Actions: Update build and test (chaynHQ#883)

Update build and test workflow by consolidating new and old versions into 1.
Because new workflow (pull request target) extends on old workflow, no need for both.

Author: kyleecodes

.github/workflows/build-and-test-fork-prs.yml

@@ -1,17 +1,39 @@
-name: Build & test # on both PRs and push to develop/main
+name: Build & test # on PRs (including forks) and push to develop/main
 
 on:
-  pull_request:
-    branches: [develop]
+  pull_request_target:
+    types: [opened, synchronize]
   push:
     branches: [develop]
 
 jobs:
   build-and-test:
-    name: Build & test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      # Get user permission of workflow triggering actor, return true or false
+      - name: Get Workflow Actor Permission
+        id: checkAccess
+        # Action used: https://github.com/actions-cool/check-user-permission
+        uses: actions-cool/check-user-permission@v2
+        with:
+          require: write
+          username: ${{ github.triggering_actor }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      # Check user permission from previous step, exit if false
+      - name: Check Workflow Actor Permission
+        if: steps.checkAccess.outputs.require-result == 'false'
+        run: |
+          echo "${{ github.triggering_actor }} does not have permissions to run workflows on this repo."
+          echo "Current permission level is ${{ steps.checkAccess.outputs.user-permission }}"
+          echo "Job originally triggered by ${{ github.actor }}"
+          exit 1
+      # Checkout PR code
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          # This is dangerous without the first access check
+          ref: ${{  github.event.pull_request.head.sha }}
       - name: Get yarn cache directory path
         id: yarn-cache-dir-path
         run: echo "::set-output name=dir::$(yarn cache dir)"
@@ -26,14 +48,11 @@ jobs:
       - name: Use NodeJs
         uses: actions/setup-node@v3
         with:
-          node-version: '20.x'
-
+          node-version: "20.x"
       - name: Install dependencies
         run: yarn install --frozen-lockfile --non-interactive
-
       - name: Run linting
         run: yarn lint
-
       - name: Build app
         run: yarn build
         env: