[strategist] planning: ROADMAP.md strategic health June 20 — pass 20 (T-9 days) #3443

	name: Submodule Guard

	on:
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	check-submodules:
	if: github.repository == 'kubestellar/console'
	runs-on: ubuntu-latest
	timeout-minutes: 2
	steps:
	- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

	- name: Detect orphaned submodule entries
	run: \|
	SUBMODULE_ENTRIES=$(git ls-tree HEAD \| awk '$2 == "commit" {print $4}')
	if [ -z "$SUBMODULE_ENTRIES" ]; then
	echo "No submodule entries found — OK"
	exit 0
	fi

	ORPHANED=""
	for entry in $SUBMODULE_ENTRIES; do
	if [ ! -f .gitmodules ]; then
	ORPHANED="${ORPHANED} ${entry}"
	elif ! grep -q "path = ${entry}" .gitmodules 2>/dev/null; then
	ORPHANED="${ORPHANED} ${entry}"
	fi
	done

	if [ -n "$ORPHANED" ]; then
	echo "::error::Orphaned submodule entries found:${ORPHANED}"
	echo ""
	echo "These entries exist in the git tree (mode 160000) but have no"
	echo "matching path in .gitmodules. This breaks Netlify deploys."
	echo ""
	echo "Fix: git rm --cached <path> for each orphaned entry"
	exit 1
	fi

	echo "All submodule entries have matching .gitmodules paths — OK"

Provide feedback