add trunk check with all check-mode to code quality workflow

[1a1a11a]

No description provided.

[trunk-io]

✨ Submitted to Merge by @1a1a11a. It will be added to the merge queue once all branch protection rules pass and there are no merge conflicts with the target branch. See more details here.

[Copilot]

Pull Request Overview

This PR adds a new Trunk static analysis check to the existing code-quality workflow.

• Introduces a Trunk Check step using trunk-io/trunk-action@v1
• Configures the action to run in all check mode

Comments suppressed due to low confidence (1)

.github/workflows/code-quality.yml:19

• The Trunk Action requires an API token for authentication. Please add a token input (e.g., from secrets.TRUNK_API_TOKEN) under the with block to ensure the step can authenticate successfully.

        uses: trunk-io/trunk-action@v1

[haochengxia]

Should we add concurrency check to avoid multiple actions for the same PR and save resources? Also set read-all to apply read-reconstruction for all job.

concurrency:
  group: ${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

permissions: read-all

[1a1a11a]

Should we add concurrency check to avoid multiple actions for the same PR and save resources? Also set read-all to apply read-reconstruction for all job.

concurrency:
  group: ${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

permissions: read-all

Updated.