Investigate how to set up IP/domain filtering for non-maintainers

[favonia]

Currently, GitHub actions not initiated by me (for example, dependabot) seem to block all external IP and domains. For now, the checking is made optional so that the CI would work.