diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml
index 3753486..49e3a4c 100644
--- a/.github/workflows/code-quality.yml
+++ b/.github/workflows/code-quality.yml
@@ -1,6 +1,9 @@
 name: Code Quality Checks
 
-on: push
+# pull_request also covers fork PRs, so lint + type-check gate them too.
+on:
+  push:
+  pull_request:
 
 permissions:
   contents: read