but consumes vastly more resources than most app's build process.

Done that way it obfuscates cost of the code review and I think that's on purpose

The cost of running a container (to github) is someone else not being able to run a container.