accesslint/AccessLint Audit

WCAG 2.2 accessibility audit for any URL. Source-mapped to React/JSX lines, with inline PR annotations and regression mode.

Trust Signals

workflow.ymlSHA-pinned

uses: accesslint/audit@ed90abdd631a044d622a4a0db9078bc750a5069b # v0.3.2

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
url	Single URL to audit. Use `urls` for multiple. One of `url` or `urls` is required.	—	""
urls	One URL per line. Audits each, aggregates into one report. Mutually exclusive with `url` (urls wins when both are set).	—	""
compare-against	Baseline URL — when set, only violations new in `url` relative to this baseline are reported. Single-URL only; combining with `urls` errors.	—	""
wcag-level	Conformance level. One of: A, AA, AAA. Default AA.	—	AA
min-impact	Minimum impact level to include in the report. One of: critical, serious, moderate, minor. Default serious.	—	serious
fail-on	Exit non-zero when the report contains violations at this level or worse. One of: never (default — composition-friendly), any, critical, serious, moderate, minor.	—	never
rules	Allowlist — comma- or whitespace-separated rule IDs to run. Empty (default) runs every rule that passes wcag-level + rules-exclude.	—	""
rules-exclude	Denylist — comma- or whitespace-separated rule IDs to skip. Example: 'landmarks/region,navigable/bypass'.	—	""
wait-for	What to wait for after navigation. Examples: load, domcontentloaded, networkidle (default), or a CSS selector like '#app-ready'.	—	networkidle
auth-headers	JSON object of HTTP headers for every request. Example shape: {"Authorization":"Bearer <token>","X-Vercel-Protection-Bypass":"<token>"}.	—	""

name	description
violation-count	Total violations after the min-impact filter (across all URLs in multi-URL mode).
critical-count	Number of critical-impact violations.
serious-count	Number of serious-impact violations.
annotated-count	How many violations had a workspace-relative source location and got an inline `::warning::` annotation.
failed	'true' when violation-count is greater than zero, else 'false'. Independent of fail-on — fail-on controls the exit code; this output reports detection.
report-json-path	Path to the JSON report file.
report-markdown-path	Path to the Markdown report file.
report-sarif-path	Path to the SARIF v2.1.0 report. Pipe to github/codeql-action/upload-sarif to surface violations in the Security tab.