Require safe-to-test label for CI to run (#141)

* Require safe-to-test label for CI to run

Fixes:
[ML-11153](https://iguazio.atlassian.net/browse/ML-11153)
[ML-11154](https://iguazio.atlassian.net/browse/ML-11154)

* Delete CI action on push

---------

Co-authored-by: Gal Topper <Gal_Topper-BNKK@mckinsey.com>

Author: gtopper

.github/workflows/pr.yml

@@ -19,6 +19,15 @@ on:
   workflow_dispatch:
 
 jobs:
+  fail-if-unsafe:
+    runs-on: ubuntu-latest
+    if: ${{ !contains( github.event.pull_request.labels.*.name, 'safe-to-test') }}
+    steps:
+      - name: Fail if not marked as safe to test
+        run: |
+          echo "CI will not run on a PR unless it has the safe-to-test label applied"
+          exit 1
+
   lint:
     name: Lint code
     runs-on: ubuntu-latest
@@ -39,6 +48,7 @@ jobs:
   test:
     name: Tests
     runs-on: [ self-hosted, Linux ]
+    if: ${{ contains( github.event.pull_request.labels.*.name, 'safe-to-test') }}
     container:
       image: python:3.9.18
       credentials: