feat: Refactor into a composite action (#8)

Fixes github/accessibility#9221 (Hubber access
only)

This PR migrates to a composite action, with no user-facing changes—the
main public action takes the same inputs as before, and it performs the
same tasks.

This PR adds 3 new public actions (‘find’, ‘file’, and ‘fix’) inside the
`.github/actions` subdirectory. Each of these can be run by itself,
without the others, as long as its required inputs are supplied. This
increases flexibility; for example, a user with scanning automations
already in place could leverage just the ‘file’ and ‘fix’ actions.

To test, I ran this branch’s code (excluding
github-community-projects/continuous-ai-for-accessibility-scanner@9e6b693)
in
https://github.com/github/accessibility-sandbox/actions/runs/16734265309/job/47369451800
(Hubber access only), which created
github/accessibility-sandbox#4355 (Hubber
access only).

Author: smockle

.github/actions/file/README.md

@@ -0,0 +1,29 @@
+# file
+
+Files GitHub issues to track potential accessibility gaps.
+
+## Usage
+
+### Inputs
+
+#### `findings`
+
+**Required** List of potential accessibility gaps, as stringified JSON. For example:
+
+```JS
+'[]'
+```
+
+#### `repository`
+
+**Required** Repository (with owner) to file issues in. For example: `primer/primer-docs`.
+
+#### `token`
+
+**Required** Token with fine-grained permission 'issues: write'.
+
+### Outputs
+
+#### `issue_numbers`
+
+List of issue numbers for created issues, as stringified JSON. For example: `'[123, 124, 126, 127]'`.

.github/actions/file/action.yml

@@ -0,0 +1,25 @@
+name: "File"
+description: "Files GitHub issues to track potential accessibility gaps."
+
+inputs:
+  findings:
+    description: "List of potential accessibility gaps, as stringified JSON"
+    required: true
+  repository:
+    description: "Repository (with owner) to file issues in"
+    required: true
+  token:
+    description: "Token with fine-grained permission 'issues: write'"
+    required: true
+
+outputs:
+  issue_numbers:
+    description: "List of issue numbers for created issues, as stringified JSON"
+
+runs:
+  using: "node20"
+  main: "bootstrap.js"
+
+branding:
+  icon: "compass"
+  color: "blue"

bootstrap.js .github/actions/file/bootstrap.jsbootstrap.js renamed to .github/actions/file/bootstrap.js

@@ -0,0 +1,23 @@
+{
+  "name": "file",
+  "version": "1.0.0",
+  "description": "Files GitHub issues to track potential accessibility gaps.",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "scripts": {
+    "start": "node bootstrap.js",
+    "build": "tsc"
+  },
+  "keywords": [],
+  "author": "GitHub",
+  "license": "MIT",
+  "type": "module",
+  "dependencies": {
+    "@actions/core": "^1.11.1",
+    "@octokit/core": "^7.0.3"
+  },
+  "devDependencies": {
+    "@types/node": "^24.1.0",
+    "typescript": "^5.8.3"
+  }
+}

package-lock.json .github/actions/file/package-lock.jsonpackage-lock.json renamed to .github/actions/file/package-lock.json

@@ -1,13 +1,13 @@
 import type { Octokit } from '@octokit/core';
-import type { Result } from './types.d.js';
+import type { Finding } from './types.d.js';
 import * as url from 'node:url'
 const URL = url.URL;
 
-export async function fileIssueForResult(octokit: Octokit, repoWithOwner: string, result: Result) {
+export async function fileIssueForFinding(octokit: Octokit, repoWithOwner: string, finding: Finding) {
   const owner = repoWithOwner.split('/')[0];
   const repo = repoWithOwner.split('/')[1];
-  const title = `Accessibility issue: ${result.problemShort[0].toUpperCase() + result.problemShort.slice(1)} on ${new URL(result.url).pathname}`;
-  const solutionLong = result.solutionLong
+  const title = `Accessibility issue: ${finding.problemShort[0].toUpperCase() + finding.problemShort.slice(1)} on ${new URL(finding.url).pathname}`;
+  const solutionLong = finding.solutionLong
     ?.split("\n")
     .map((line) =>
       !line.trim().startsWith("Fix any") &&
@@ -18,9 +18,9 @@ export async function fileIssueForResult(octokit: Octokit, repoWithOwner: string
     )
     .join("\n");
   const body = `
-An accessibility scan flagged the element \`${result.html}\` on ${result.url} because ${result.problemShort}. Learn more about why this was flagged by visiting ${result.problemUrl}.
+An accessibility scan flagged the element \`${finding.html}\` on ${finding.url} because ${finding.problemShort}. Learn more about why this was flagged by visiting ${finding.problemUrl}.
 
-To fix this, ${result.solutionShort}.
+To fix this, ${finding.solutionShort}.
 ${solutionLong ? `\nSpecifically:\n\n${solutionLong}` : ''}
 `;
 

.github/actions/file/package.json

@@ -0,0 +1,20 @@
+import type { Finding } from "./types.d.js";
+import core from "@actions/core";
+import { Octokit } from '@octokit/core';
+import { fileIssueForFinding } from "./fileIssueForFinding.js";
+
+export default async function () {
+  const findings: Finding[] = JSON.parse(core.getInput('findings', { required: true }));
+  const repoWithOwner = core.getInput('repository', { required: true });
+  const token = core.getInput('token', { required: true });
+
+  const issueNumbers = [];
+  const octokit = new Octokit({ auth: token });
+  for (const finding of findings) {
+    const response = await fileIssueForFinding(octokit, repoWithOwner, finding);
+    issueNumbers.push(response.data.number);
+    console.log(`Created issue: ${response.data.title} (${repoWithOwner}#${response.data.number})`);
+  }
+
+  core.setOutput("issue_numbers", JSON.stringify(issueNumbers));
+}

src/fileIssueForResult.ts …/actions/file/src/fileIssueForFinding.tssrc/fileIssueForResult.ts renamed to .github/actions/file/src/fileIssueForFinding.ts src/fileIssueForResult.ts renamed to .github/actions/file/src/fileIssueForFinding.ts

@@ -1,4 +1,4 @@
-export type Result = {
+export type Finding = {
   url: string;
   html: string;
   problemShort: string;

.github/actions/file/src/index.ts

@@ -0,0 +1,26 @@
+# find
+
+Finds potential accessibility gaps.
+
+## Usage
+
+### Inputs
+
+#### `urls`
+
+**Required** Newline-delimited list of URLs to check for accessibility issues. For example:
+
+```txt
+https://primer.style
+https://primer.style/octicons/
+```
+
+### Outputs
+
+#### `findings`
+
+List of potential accessibility gaps, as stringified JSON. For example:
+
+```JS
+'[]'
+```