[whalesalad]

Code review ostensibly takes place inside a container runtime just like tests or other actions would. It makes sense to me.

[PunchyHamster]

but consumes vastly more resources than most app's build process.

Done that way it obfuscates cost of the code review and I think that's on purpose

[whalesalad]

The cost of running a container (to github) is someone else not being able to run a container.