ci: static analysis jobs do not always run

I noticed that my most recent MR did not run cppcheck, gcc-analyzer, or scan-build: garcon!50 (merged)

Looking at previous MRs, it seems like static analysis jobs do not run for non-maintainers:

• libxfce4windowing!104 (merged)
• xfce4-panel!205 (closed)
• thunar!756 (merged)

Is it possible there's a permissions issue with some of the CI variables?