mirror of
https://github.com/Stirling-Tools/Stirling-PDF.git
synced 2026-09-03 05:10:16 +03:00
James Brunton
588afb6306
# Description of Changes This fixes the a11y violations that are currently failing in the nightlies in dark mode. Now that we're down to 0 baseline, we can require the a11y tests to pass in PRs before they merge, so I've changed that, and I've also made it so that the nightly will report failures in both light and dark mode instead of just light mode if that fails. <img width="2560" height="838" alt="image" src="https://github.com/user-attachments/assets/b0322182-f6ff-4dea-9a1c-5a6c9c9c5439" />
56 lines
2.1 KiB
YAML
56 lines
2.1 KiB
YAML
name: Frontend a11y regression gate
|
|
|
|
# Reusable workflow called from build.yml when frontend sources change.
|
|
#
|
|
# Scans the stories this branch touches in real Chromium and runs axe against
|
|
# each; the check fails on any axe violation, or on a story that fails to render
|
|
# at all.
|
|
#
|
|
# Only changed stories, because a full sweep is ~30 minutes: far too slow to sit
|
|
# in front of every merge. The whole suite is scanned nightly instead
|
|
# (nightly.yml), which catches anything a branch didn't touch.
|
|
on:
|
|
workflow_call:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
frontend-a11y:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 25
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
|
|
with:
|
|
egress-policy: audit
|
|
- name: Checkout repository
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
# Need the base branch too, to diff against it.
|
|
fetch-depth: 0
|
|
- name: Set up Node.js
|
|
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
|
|
with:
|
|
node-version: "22"
|
|
cache: "npm"
|
|
cache-dependency-path: frontend/package-lock.json
|
|
- name: Install Task
|
|
uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
|
|
- name: a11y gate (changed stories)
|
|
run: task frontend:storybook:a11y:changed -- origin/${{ github.base_ref || 'main' }}
|
|
- name: Upload scan reports
|
|
# The reports carry the offending selector and help text for each
|
|
# violation; without them a red run can only be understood by
|
|
# reproducing the whole scan locally.
|
|
if: always()
|
|
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
|
with:
|
|
name: a11y-scan-${{ github.run_id }}
|
|
path: frontend/.a11y-scan/
|
|
retention-days: 7
|
|
if-no-files-found: ignore
|
|
# The reports live in a dot-directory, which upload-artifact treats as
|
|
# hidden and silently skips by default.
|
|
include-hidden-files: true
|