[WIP] see if pa11y works with GitHub Action

.github/workflows/accessibility-testing.yml

@@ -0,0 +1,80 @@
+name: Accessibility Testing
+
+on:
+  push:
+    branches: ["main"]
+    paths-ignore:
+      - maintenance/**/*.*
+  pull_request:
+    paths-ignore:
+      - maintenance/**/*.*
+
+jobs:
+  test_accessibility:
+    name: Accessibility testing with pa11y and axe
+    runs-on: ubuntu-20.04
+    services:
+      postgres:
+        image: postgres:13.2
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: network
+        ports:
+          - 5432:5432
+        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
+    env:
+      ALLOWED_HOSTS: 127.0.0.1,localhost,mozfest.localhost,default-site.com,secondary-site.com
+      CONTENT_TYPE_NO_SNIFF: True
+      CORS_ALLOWED_ORIGINS: "*"
+      DATABASE_URL: postgres://postgres:postgres@localhost:5432/network
+      DEBUG: True
+      DJANGO_SECRET_KEY: secret
+      DOMAIN_REDIRECT_MIDDLEWARE_ENABLED: False
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      NETWORK_SITE_URL: https://foundation.mozilla.org
+      PIPENV_VERBOSITY: -1
+      PULSE_API_DOMAIN: https://network-pulse-api-production.herokuapp.com
+      PULSE_DOMAIN: https://www.mozillapulse.org
+      RANDOM_SEED: 530910203
+      SET_HSTS: False
+      SSL_REDIRECT: False
+      TARGET_DOMAINS: foundation.mozilla.org
+      USE_S3: False
+      X_FRAME_OPTIONS: DENY
+      XSS_PROTECTION: True
+      CSP_CONNECT_SRC: "*"
+      CSP_FONT_SRC: "'self' https://fonts.gstatic.com https://fonts.googleapis.com https://code.cdn.mozilla.net https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/ data:"
+      CSP_FRAME_SRC: "'self' https://www.google.com/recaptcha/"
+      CSP_SCRIPT_SRC: "'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js http://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdnjs.cloudflare.com/ajax/libs/gsap/3.8.0/gsap.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.8.0/ScrollTrigger.min.js https://*.googletagmanager.com https://*.fundraiseup.com https://mozillafoundation.tfaforms.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-eval'"
+      CSP_STYLE_SRC: "'self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com https://platform.twitter.com https://mozillafoundation.tfaforms.net https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css"
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-python@v4
+        with:
+          python-version: 3.9.9
+
+          cache: "pip"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 18
+          cache: "npm"
+      - name: Install Python Dependencies
+        run: pip install -r requirements.txt -r dev-requirements.txt
+      - name: Install Node Dependencies
+        run: npm ci
+      - name: Install additional tooling
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y gettext libgconf-2-4
+      - name: Install pa11y
+        run: npm install pa11y
+      - name: Preroll
+        run: |
+          npm run build
+          python network-api/manage.py collectstatic --no-input --verbosity 0
+          python network-api/manage.py migrate --no-input
+          python network-api/manage.py block_inventory
+          python network-api/manage.py load_fake_data
+      - name: Integration Tests
+        run: npm run pa11y