feat: add linter for version control

.gitignore

@@ -1 +1,5 @@
 tests/libs/
+
+#IntelliJ
+/*.iml
+/.idea/

README.md

@@ -438,6 +438,7 @@ devbase-check/
 │   ├── secrets.sh
 │   ├── shell-fmt.sh
 │   ├── shell.sh
+│   ├── version-control.sh
 │   ├── xml.sh
 │   └── yaml.sh
 ├── scripts/

justfile

@@ -58,6 +58,11 @@ lint-base:
 [group('lint')]
 lint-all: lint-base
 
+# Validate version control
+[group('lint')]
+lint-version-control:
+    @{{lint}}/version-control.sh
+
 # Validate commit messages (conform)
 [group('lint')]
 lint-commits:

linters/version-control.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+# SPDX-FileCopyrightText: 2025 Digg - Agency for Digital Government
+#
+# SPDX-License-Identifier: MIT
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../utils/colors.sh"
+
+main() {
+  print_header "VERSION CONTROL"
+
+  if test -z "$(git status --porcelain | awk '{$1=$1};1')"; then
+    print_success "All changes are under version control"
+    return 0
+  else
+    print_error "Some changes are not under version control!
+
+  This can happen if
+
+    1. You forgot to version control your changes
+    2. A linter automatically fixed a problem or reformatted the code.
+
+  Please accept or discard any outstanding changes and try again."
+    return 1
+  fi
+}
+
+main

scripts/verify.sh

@@ -17,6 +17,7 @@ source "${SCRIPT_DIR}/../summary/common.sh"
 
 # Base linters
 LINTERS=(
+  "Version Control|git|just lint-version-control"
   "Commits|conform|just lint-commits"
   "Secrets|gitleaks|just lint-secrets"
   "YAML|yamlfmt|just lint-yaml"

tests/linters-version-control.bats

@@ -0,0 +1,49 @@
+#!/usr/bin/env bats
+
+# SPDX-FileCopyrightText: 2025 Digg - Agency for Digital Government
+#
+# SPDX-License-Identifier: MIT
+
+bats_require_minimum_version 1.13.0
+
+load "${BATS_TEST_DIRNAME}/libs/bats-support/load.bash"
+load "${BATS_TEST_DIRNAME}/libs/bats-assert/load.bash"
+load "${BATS_TEST_DIRNAME}/libs/bats-file/load.bash"
+load "${BATS_TEST_DIRNAME}/libs/bats-mock/stub.bash"
+load "${BATS_TEST_DIRNAME}/test_helper.bash"
+
+setup() {
+  common_setup
+  export LINTERS_DIR="${DEVTOOLS_ROOT}/linters"
+  cd "$TEST_DIR"
+  init_git_repo
+}
+
+teardown() {
+  unstub conform 2>/dev/null || true
+  common_teardown
+}
+
+@test "version-control.sh accepts clean working directory" {
+  run --separate-stderr "$LINTERS_DIR/version-control.sh"
+
+  [ "x$BATS_TEST_COMPLETED" = "x" ] && echo "o:'${output}' e:'${stderr}'"
+  assert_success
+  assert_output --partial "All changes are under version control"
+}
+
+@test "version-control.sh rejects unversioned file" {
+  touch dummy-file
+  run "$LINTERS_DIR/version-control.sh"
+
+  [ "x$BATS_TEST_COMPLETED" = "x" ] && echo "o:'${output}' e:'${stderr}'"
+  assert_failure
+  assert_output --partial "Some changes are not under version control!
+
+  This can happen if
+
+    1. You forgot to version control your changes
+    2. A linter automatically fixed a problem or reformatted the code.
+
+  Please accept or discard any outstanding changes and try again."
+}