[Issue #677]: Add accessibility checks against pr preview env

.github/workflows/ci-app-accessibility-tests.yml

@@ -0,0 +1,61 @@
+name: CI App Accessibility Tests
+
+on:
+  pull_request:
+    paths:
+      - app/**
+      - .github/workflows/ci-a11y.yml
+
+jobs:
+  build:
+    name: Accessibility
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ./app
+
+    env:
+      NODE_VERSION: 20
+      LOCKFILE_PATH: ./app/package-lock.json
+      PACKAGE_MANAGER: npm
+
+    steps:
+      - name: Checkout source
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache-dependency-path: ${{ env.LOCKFILE_PATH }}
+          cache: ${{ env.PACKAGE_MANAGER }}
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Create screenshots directory
+        run: mkdir -p screenshots-output
+
+      - name: Build project
+        run: npm run build
+
+      - name: Start server and log output
+        run: npm run start &
+
+      - name: Wait for frontend to be ready
+        run: |
+          # Ensure the server wait script is executable
+          chmod +x ./bin/wait-for-frontend.sh
+          ./bin/wait-for-frontend.sh
+      - name: Run pa11y-ci
+        run: |
+          set -e # Ensure the script fails if any command fails
+          npm run test:pa11y-desktop
+          npm run test:pa11y-mobile
+          echo "pa11y-ci tests finished."
+      - name: Upload screenshots to artifacts
+        if: always()
+        uses: actions/upload-artifact@v3
+        with:
+          name: screenshots
+          path: ./app/screenshots-output

.gitignore

@@ -1,6 +1,6 @@
 # Ignore Terraform lock files
 # As of Feb 2023, Terraform lock files, while well intentioned, have a tendency
-# to get into a confusing state that requires recreating the lock file, which 
+# to get into a confusing state that requires recreating the lock file, which
 # defeats the purpose. Moreover, lock files are per environment, which can make
 # it difficult for people to upgrade dependencies (e.g. upgrade an AWS provider)
 # across environments if certain environments are locked down (e.g. production).
@@ -15,3 +15,6 @@
 # Ignore local environment variables which can contain environment secrets
 .env
 .envrc
+
+# Root level node_modules
+node_modules/*

.pa11yci-desktop.json

@@ -0,0 +1,16 @@
+{
+    "defaults": {
+      "timeout": 240000,
+      "runners": ["axe"],
+      "ignore": ["color-contrast"],
+      "concurrency": 1,
+      "chromeLaunchConfig": {
+        "ignoreHTTPSErrors": true,
+        "args": ["--disable-dev-shm-usage", "--no-sandbox"]
+      },
+      "actions": [
+        "wait for element #main-content to be visible",
+        "screen capture screenshots-output/desktop-main-view.png"
+      ]
+    }
+  }

.pa11yci-mobile.json

@@ -0,0 +1,23 @@
+{
+    "defaults": {
+      "timeout": 240000,
+      "runners": ["axe"],
+      "ignore": ["color-contrast"],
+      "concurrency": 1,
+      "chromeLaunchConfig": {
+        "ignoreHTTPSErrors": true,
+        "args": ["--disable-dev-shm-usage", "--no-sandbox"]
+      },
+      "viewport": {
+        "width": 390,
+        "height": 844,
+        "mobile": true
+      },
+      "actions": [
+        "wait for element #main-content to be visible",
+        "screen capture screenshots-output/mobile-main-view.png",
+        "click element .usa-navbar button",
+        "screen capture screenshots-output/mobile-expand-menu.png"
+      ]
+    }
+  }