OUT-3989: L0.5 — run lint + type-check on pull_request

[SandipBajracharya]

L0.5 — CI wiring

Linear: OUT-3989 · parent OUT-3984 · base branch: OUT-3988

Context

Most of L0.5 was already delivered under OUT-3985 — test.yml splits unit vs integration jobs, Testcontainers uses the ubuntu-latest Docker daemon (no services: needed), pnpm deps are cached, and both jobs run the existing pnpm test / test:integration scripts. This PR closes the one worthwhile remaining gap.

Change

code-quality.yml ran on: push only, so lint + type-check did not gate pull requests (including fork PRs), while test.yml runs on both push and pull_request. This aligns the trigger:

-on: push
+on:
+  push:
+  pull_request:

Deliberately not included: Docker-layer image caching

The ticket names Docker-layer caching, but it's declined on cost/benefit grounds: postgres:17-alpine is ~30 MB, so actions/cache + docker save/load costs about as much as the pull (a known anti-pattern for small images), and it wouldn't cover Testcontainers' Ryuk image. The only risk that would justify it — Docker Hub rate limits — is properly solved with registry auth, not a tarball cache, and isn't currently biting. Revisit with docker/login-action if toomanyrequests ever appears.

🤖 Generated with Claude Code

[linear-code]

OUT-3989

[greptile-apps]

Greptile Summary

This PR extends the code-quality workflow to run on pull requests, including fork PRs, so linting and type-checking can gate proposed changes.

• Retains the existing push trigger.
• Adds the pull_request trigger.
• Leaves workflow permissions and job behavior unchanged.

Confidence Score: 5/5

The PR appears safe to merge, with the pull-request trigger compatible with the workflow’s existing read-only jobs and permissions.

The changed workflow continues to run the same lint and type-check commands without secrets or write permissions, and those steps are compatible with fork pull requests.

Important Files Changed

Filename	Overview
.github/workflows/code-quality.yml	Adds a valid pull-request trigger to the existing read-only lint and type-check workflow without introducing permission, secret, or execution-path issues.

_{Reviews (1): Last reviewed commit: "ci(OUT-3989): run lint + type-check on p..." | Re-trigger Greptile}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dropbox-integration	Ready	Preview	Aug 7, 2026 8:17am