Allow trusted people to run GitHub action tests (#94)

* Allow trusted people to run tests

* Clarify when workflows run

.github/workflows/javascript-tests.yaml

@@ -9,12 +9,20 @@ on:
     types:
       - opened
       - labeled
+      - synchronize
 
 
 jobs:
   test:
     runs-on: ubuntu-latest
-    if: contains(github.event.pull_request.labels.*.name, 'okay-to-test') || (github.event_name == 'push')
+    # We'll run if one of the following is met:
+    # 1. The 'okay-to-test' labeled has just been added to the PR.
+    # 2. A member or collaborator opens a PR or pushes new commits to it.
+    # 3. This is a push to the main branch.
+    if: |
+      (contains(github.event.pull_request.labels.*.name, 'okay-to-test') && github.event.action == 'labeled') ||
+      contains(fromJson('["MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association) ||
+      github.event_name == 'push'
 
     steps:
       # https://github.com/actions/checkout/issues/518

.github/workflows/python-tests.yaml

@@ -9,11 +9,19 @@ on:
     types:
       - opened
       - labeled
+      - synchronize
 
 jobs:
   test:
     runs-on: ubuntu-latest
-    if: contains(github.event.pull_request.labels.*.name, 'okay-to-test') || (github.event_name == 'push')
+    # We'll run if one of the following is met:
+    # 1. The 'okay-to-test' labeled has just been added to the PR.
+    # 2. A member or collaborator opens a PR or pushes new commits to it.
+    # 3. This is a push to the main branch.
+    if: |
+      (contains(github.event.pull_request.labels.*.name, 'okay-to-test') && github.event.action == 'labeled') ||
+      contains(fromJson('["MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association) ||
+      github.event_name == 'push'
 
     steps:
       # https://github.com/actions/checkout/issues/518