its-fortunatefolly/HubVibe WCAG SEO and Security Audit
Automated WCAG, SEO, security, and performance compliance audits for CI/CD pipelines.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| url | The live URL to audit (a deployed preview, staging, or production URL). | yes | — |
| api-key | HubVibe API key, passed as X-API-Key. Optional: without it the run stops on the service's HTTP 402 payment challenge and prints how to pay. | no | "" |
| wallet-key | EVM private key (a repo secret) funded with USDC on Base, used to pay the 402 per call via x402 -- no account, no checkout, no subscription. Costs $0.05 a run ($0.15 for the bundle) and settles in seconds. This exists because requiring an account before the first useful run is an adoption wall: a CI step whose first execution fails and asks for a signup gets deleted on the next push. With a wallet the pipeline funds itself once and simply works, which is the whole point of a machine-payable API. Never hardcode this. Use `${{ secrets.HUBVIBE_WALLET_KEY }}` and fund the address with only what you intend to spend -- treat it as a petty-cash float, not a treasury. `max-price-usd` caps any single call. | no | "" |
| max-price-usd | Hard ceiling on what one call may spend when paying with wallet-key. The client refuses to sign above it, so a misconfigured or hostile price in a 402 cannot drain the wallet -- it fails the step instead. | no | 0.15 |
| endpoint | Which audit to run: wcag, seo, security, performance, or bundle (all four, billed once). | no | bundle |
| fail-on-violation | If false, findings are reported to the job summary but never fail the build. | no | true |
| fail-on-error | If false, an infrastructure failure (network, 402, 5xx) reports a warning instead of failing the build. Findings are still governed by fail-on-violation. Set false to adopt the audit without letting an outage in a third-party service block your deploys. | no | true |
| timeout-seconds | Per-attempt HTTP timeout. | no | 90 |
| retries | Retries on network error or 5xx, with exponential backoff. Does not retry 4xx. | no | 2 |
| base-url | Override the service base URL (self-hosted or staging deployments). | no | https://hubvibe-io.com |
Outputs
| name | description |
|---|---|
| passed | true or false -- whether the audit's overall `pass` field was true. |
| response | The raw JSON response body from the audit call. |
| http-status | HTTP status of the final attempt, or 000 if the request never completed. |