pa11y.yml

# Pa11y-CI automated accessibility audit
#
# manual dispatch audits integration by default
# ------------------------------------------------------------------------------
---
name: Check WCAG Standards

on:
  # workflow_dispatch:
  #   inputs:
  #     workspace:
  #       description: Deployment workspace to test against (dev, review-pr-xxx)
  #       type: string
  #       default: dev
  merge_group:
  pull_request:

jobs:
  test:
    if: contains(github.event.pull_request.labels.*.name, 'review')
    runs-on: ubuntu-latest
    environment: development
    env:
      BOT_TOKEN: ${{ secrets.WEBAPP_CONFIG_BOT_TOKEN }}
      # DOMAIN: eyrecovery-${{ inputs.workspace }}.azurewebsites.net
      DOMAIN: eyrecovery-review-pr-${{ github.event.number }}.azurewebsites.net
    steps:
      -
        name: Checkout Code
        uses: actions/checkout@v4
      -
        name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 18.x
          cache: npm
      -
        name: Install Chrome
        uses: browser-actions/setup-chrome@latest
      -
        name: Install pa11y-ci
        env:
          PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: 'true'
        run: |
          npm install --global --unsafe-perm puppeteer pa11y-ci
          mkdir /tmp/pa11y
          sed -i "s/token/${BOT_TOKEN}/g" .pa11yci
      -
        name: Audit
        env:
          PUPPETEER_EXECUTABLE_PATH: /opt/hostedtoolcache/chromium/latest/x64/chrome
        run: pa11y-ci --sitemap https://${DOMAIN}/sitemap.xml > report.txt
      -
        name: Report
        run: cat report.txt && ((`cat report.txt | grep sign-in | wc -l`<2)) || exit 1