From 5825a86329fade2ddce123bea0f64fe6fdf71ecf Mon Sep 17 00:00:00 2001
From: Brad King <brad.king@kitware.com>
Date: Mon, 28 Sep 2026 12:14:30 -0400
Subject: [PATCH] ci: Add lint job to run ast-grep on our C++ code

Closes: #28119
---
 .gitlab-ci.yml              | 7 +++++++
 .gitlab/ci/ast-grep-scan.sh | 2 ++
 .gitlab/os-linux.yml        | 8 ++++++++
 3 files changed, 17 insertions(+)
 create mode 100755 .gitlab/ci/ast-grep-scan.sh

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 62e85c5d86..59e09fa6ce 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -123,6 +123,13 @@ l:spellcheck:
         - .rules
     needs: []
 
+l:ast-grep:
+    extends:
+        - .cmake_ast_grep_linux
+        - .linux_x86_64_tags
+        - .rules
+    needs: []
+
 l:iwyu-debian13:
     extends:
         - .debian13_iwyu
diff --git a/.gitlab/ci/ast-grep-scan.sh b/.gitlab/ci/ast-grep-scan.sh
new file mode 100755
index 0000000000..83bb41ec5b
--- /dev/null
+++ b/.gitlab/ci/ast-grep-scan.sh
@@ -0,0 +1,2 @@
+#!/bin/sh
+ast-grep scan --error
diff --git a/.gitlab/os-linux.yml b/.gitlab/os-linux.yml
index 8060d93e34..efdf8812a9 100644
--- a/.gitlab/os-linux.yml
+++ b/.gitlab/os-linux.yml
@@ -796,6 +796,14 @@
         - .gitlab/ci/typos.bash
     interruptible: true
 
+.cmake_ast_grep_linux:
+    stage: build
+    extends: .fedora44
+    script:
+        - source .gitlab/ci/ast-grep-env.sh
+        - .gitlab/ci/ast-grep-scan.sh
+    interruptible: true
+
 .cmake_build_linux:
     stage: build