[Do not merge] - test workflows without elevated perms

.github/workflows/contractors_review_requirements.yml

@@ -13,7 +13,11 @@ jobs:
     name: "Check if a review is required from Connector teams"
     runs-on: ubuntu-latest
 
-    if: ${{ github.repository == 'airbytehq/airbyte' }}
+    if: ${{ github.event.repository.fork == false }}
+    # This workflow cannot run on forks, as the fork's github token does not have `read:org`
+    # permissions, which are required to check the user's team membership. We assume that a
+    # review on a fork's PR is always required from one or more connector teams and/or support.
+
     steps:
       - name: Check contributor team membership
         uses: tspascoal/get-user-teams-membership@v3

.github/workflows/format_fix.yml

@@ -17,21 +17,12 @@ jobs:
         uses: actions/checkout@v3
         with:
           ref: ${{ github.ref }}
-          # Important that this is set so that CI checks are triggered again
-          # Without this we would be forever waiting on required checks to pass
-          token: ${{ secrets.GH_PAT_APPROVINGTON_OCTAVIA }}
 
       - name: Run airbyte-ci format fix all
         uses: ./.github/actions/run-airbyte-ci
         continue-on-error: true
         with:
           context: "manual"
-          dagger_cloud_token: ${{ secrets.DAGGER_CLOUD_TOKEN_2 }}
-          docker_hub_password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-          docker_hub_username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          gcs_credentials: ${{ secrets.METADATA_SERVICE_PROD_GCS_CREDENTIALS }}
-          sentry_dsn: ${{ secrets.SENTRY_AIRBYTE_CI_DSN }}
-          github_token: ${{ secrets.GH_PAT_MAINTENANCE_OCTAVIA }}
           subcommand: "format fix all"
 
       # This is helpful in the case that we change a previously committed generated file to be ignored by git.