From cc5b6cc102e0b6d27f1cb4a928049fbe6e179373 Mon Sep 17 00:00:00 2001 From: Taarik <147209483+taarikashenafi@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:43:18 -0500 Subject: [PATCH 1/3] Migrate scanner workflow to published plugin Pin accessibility-scanner v3.4.0 by commit and load the alt-text plugin from its immutable npm 1.1.0 release. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 322c76db-d9b5-4400-b3a9-f5061ea99eb7 --- .github/workflows/scan-static-sites.yml | 13 +++---------- 1 file changed, 3 insertions(+), 10 deletions(-) diff --git a/.github/workflows/scan-static-sites.yml b/.github/workflows/scan-static-sites.yml index 6cd54d1..ff8dd33 100644 --- a/.github/workflows/scan-static-sites.yml +++ b/.github/workflows/scan-static-sites.yml @@ -50,20 +50,13 @@ jobs: https://github.blog/ai-and-ml/ repository: github/accessibility-scanner-testing steps: - - name: Checkout repository - uses: actions/checkout@v7 - - - name: Stage alt-text plugin - run: | - mkdir -p .github/scanner-plugins/alt-text-scan - cp -r index.ts src .github/scanner-plugins/alt-text-scan/ - - name: Run accessibility scanner - uses: github/accessibility-scanner@84a8f6de0b0f7df7ac2083386222388d0e74eeb9 # v3.3.0 + uses: github/accessibility-scanner@da2381e50d31f6e21c4fb6fad14e75f26e682ae1 # v3.4.0 with: urls: ${{ matrix.urls }} cache_key: cached_findings-${{ matrix.id }}-${{ github.ref_name }}.json repository: ${{ matrix.repository }} token: ${{ secrets.GH_TOKEN }} skip_copilot_assignment: true - scans: '["axe", "alt-text-scan"]' + scans: | + ["axe", {"name": "alt-text-scan", "package": "@github/accessibility-scanner-alt-text-plugin", "version": "1.1.0"}] From c54d36f1ab528e3f32b7f5da5fed4b0c6b3391bf Mon Sep 17 00:00:00 2001 From: Taarik <147209483+taarikashenafi@users.noreply.github.com> Date: Tue, 28 Jul 2026 12:26:31 -0500 Subject: [PATCH 2/3] Retain local plugin staging Scanner v3.4.0 installs NPM plugins in the consumer workspace but imports them relative to the action module, so keep the proven local loading path until a fixed scanner release is available. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 322c76db-d9b5-4400-b3a9-f5061ea99eb7 --- .github/workflows/scan-static-sites.yml | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scan-static-sites.yml b/.github/workflows/scan-static-sites.yml index ff8dd33..7456473 100644 --- a/.github/workflows/scan-static-sites.yml +++ b/.github/workflows/scan-static-sites.yml @@ -50,6 +50,14 @@ jobs: https://github.blog/ai-and-ml/ repository: github/accessibility-scanner-testing steps: + - name: Checkout repository + uses: actions/checkout@v7 + + - name: Stage alt-text plugin + run: | + mkdir -p .github/scanner-plugins/alt-text-scan + cp -r index.ts src .github/scanner-plugins/alt-text-scan/ + - name: Run accessibility scanner uses: github/accessibility-scanner@da2381e50d31f6e21c4fb6fad14e75f26e682ae1 # v3.4.0 with: @@ -58,5 +66,4 @@ jobs: repository: ${{ matrix.repository }} token: ${{ secrets.GH_TOKEN }} skip_copilot_assignment: true - scans: | - ["axe", {"name": "alt-text-scan", "package": "@github/accessibility-scanner-alt-text-plugin", "version": "1.1.0"}] + scans: '["axe", "alt-text-scan"]' From 9e1771aa1da0ce14153cb8fb58771dfdc4420c94 Mon Sep 17 00:00:00 2001 From: Taarik <147209483+taarikashenafi@users.noreply.github.com> Date: Tue, 28 Jul 2026 12:32:57 -0500 Subject: [PATCH 3/3] Restore NPM plugin migration Restore the package-loading workflow approved on the original PR revision. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 322c76db-d9b5-4400-b3a9-f5061ea99eb7 --- .github/workflows/scan-static-sites.yml | 11 ++--------- 1 file changed, 2 insertions(+), 9 deletions(-) diff --git a/.github/workflows/scan-static-sites.yml b/.github/workflows/scan-static-sites.yml index 7456473..ff8dd33 100644 --- a/.github/workflows/scan-static-sites.yml +++ b/.github/workflows/scan-static-sites.yml @@ -50,14 +50,6 @@ jobs: https://github.blog/ai-and-ml/ repository: github/accessibility-scanner-testing steps: - - name: Checkout repository - uses: actions/checkout@v7 - - - name: Stage alt-text plugin - run: | - mkdir -p .github/scanner-plugins/alt-text-scan - cp -r index.ts src .github/scanner-plugins/alt-text-scan/ - - name: Run accessibility scanner uses: github/accessibility-scanner@da2381e50d31f6e21c4fb6fad14e75f26e682ae1 # v3.4.0 with: @@ -66,4 +58,5 @@ jobs: repository: ${{ matrix.repository }} token: ${{ secrets.GH_TOKEN }} skip_copilot_assignment: true - scans: '["axe", "alt-text-scan"]' + scans: | + ["axe", {"name": "alt-text-scan", "package": "@github/accessibility-scanner-alt-text-plugin", "version": "1.1.0"}]