accessibility.yml

# Example workflow — copy this into your own repository.
#
# It is set to workflow_dispatch here because this repository has no site of its
# own to build. In your repository, use the push/pull_request triggers below.
name: Accessibility

on:
  workflow_dispatch:
  # push:
  #   branches: [main]
  # pull_request:

permissions:
  contents: read
  # Required by github/codeql-action/upload-sarif. Without it the upload fails
  # with "Resource not accessible by integration".
  security-events: write

jobs:
  audit:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 22

      # In your own repository this becomes:
      #   uses: likeBloodMoon/eaa-kit@v0.7.0
      #
      # An exact release tag. There is deliberately no moving v0 tag to follow:
      # this is a 0.x package, the flags and the JSON contract can still move
      # between releases, and an action that silently updates itself under a
      # build you are not watching is the wrong default for something whose job
      # is to fail that build.
      - uses: ./
        with:
          install-command: npm ci
          build-command: npm run build
          directory: ./dist
          fail-on: serious
          # Audits pages under their real URL instead of file://. Optional.
          # base-url: https://example.com