Github Actions now has a setting
I would greatly appreciate the same setting (differentiating first-time and outside collaborators), but the basic feature, simply requiring an approval on any PR from a fork, would work fine too.
