Changes committed:

	new file:   .github/workflows/trunk-check.yaml
	modified:   .trunk/.gitignore

Author: ss-o

.github/workflows/trunk-check.yaml

@@ -0,0 +1,37 @@
+---
+name: Trunk Code Quality
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+permissions: read-all
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    # Provide minimal permissions instead of write-all
+    permissions:
+      pull-requests: write
+      checks: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      # Optional caching for trunk to speed up subsequent runs
+      - name: Cache trunk
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/trunk
+          key: ${{ runner.os }}-trunk-${{ hashFiles('.trunk/trunk.yaml') }}
+
+      - name: Trunk Code Quality
+        uses: trunk-io/trunk-action@v1
+        with:
+          post-annotations: true

.trunk/.gitignore

@@ -2,7 +2,8 @@
 *logs
 *actions
 *notifications
-*tools
+tools
+tools.log
 plugins
 user_trunk.yaml
 user.yaml