CI-lint-groups-json.yml

name: CI-lint-groups-json

on:
  pull_request:
  push:
  workflow_dispatch:

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Fetch GH-Actions branch
        # The reusable half of every workflow pair lives on GH-Actions, so the
        # coverage lint needs that ref to tell an unwired group from one wired
        # only over there. actions/checkout fetches a single branch, so without
        # this the check finds no ref and skips itself silently. --depth=1 is
        # enough: the lint only reads the tree, never history.
        run: |
          git fetch --no-tags --depth=1 origin \
            +refs/heads/GH-Actions:refs/remotes/origin/GH-Actions \
            || echo "::warning::could not fetch GH-Actions; the workflow-coverage check will skip"
      - name: Lint groups.json format
        run: python3 test/tap/groups/lint_groups_json.py
      - name: Check every TAP source is registered in groups.json
        run: python3 test/tap/groups/check_groups.py --source
      - name: Check group infra/workflow coverage (warn-only)
        # Warns when a group references a missing infra (phantom), or when no
        # workflow on either branch can select the group at all -- meaning
        # tests registered in it never run in CI. Known gaps are allowlisted;
        # only NEW ones are flagged. Warn-only here (no --strict) so it never
        # reds CI.
        run: python3 test/tap/groups/lint_group_coverage.py