Change vizro-ai integration tests

[maxschulz-COL]

Description

vizro-ai integration tests require an OpenAI secret. This raises a few problems:

• potential overuse of API
• failed workflows on PRs coming from forks, e.g. https://github.com/mckinsey/vizro/actions/runs/7266034231/job/19796964925?pr=185

Proposed solution:

• only run workflows with secrets (currently only vizro-ai integration tests) only on merge to main, and once per week
• this should safeguard against bugs, but make forked PRs smoother, and API costs lower

Some interesting links if we revisit this topic:

• https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request_target
• Add option to prevent step from running in forks peaceiris/actions-gh-pages#153
• https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
• https://github.com/orgs/community/discussions/26704

Screenshot

Notice

• I acknowledge and agree that, by checking this box and clicking "Submit Pull Request":

  • I submit this contribution under the Apache 2.0 license and represent that I am entitled to do so on behalf of myself, my employer, or relevant third parties, as applicable.
  • I certify that (a) this contribution is my original creation and / or (b) to the extent it is not my original creation, I am authorized to submit this contribution on behalf of the original creator(s) or their licensees.
  • I certify that the use of this contribution as authorized by the Apache 2.0 license does not violate the intellectual property rights of anyone else.
  • I have not referenced individuals, products or companies in any commits, directly or indirectly.
  • I have not added data or restricted code in any commits, directly or indirectly.

[antonymilne]

Thanks for the quick fix, it looks good!

Remember we'll need to remove these from required jobs in the Github settings also I think?

[maxschulz-COL]

Thanks for the quick fix, it looks good!

Remember we'll need to remove these from required jobs in the Github settings also I think?

I was holding out to see what happens :)