Bump aquasecurity/trivy-action from 0.24.0 to 0.26.0 #1694

	# Pa11y-CI automated accessibility audit
	#
	# manual dispatch audits integration by default
	# ------------------------------------------------------------------------------
	---
	name: Check WCAG Standards

	on:
	# workflow_dispatch:
	# inputs:
	# workspace:
	# description: Deployment workspace to test against (dev, review-pr-xxx)
	# type: string
	# default: dev
	merge_group:
	pull_request:

	jobs:
	test:
	if: contains(github.event.pull_request.labels..name, 'review') && contains(github.event.pull_request.labels..name, 'frontend') && contains(github.event.pull_request.labels.*.name, 'a11y')
	runs-on: ubuntu-latest
	environment: development
	env:
	BOT_TOKEN: ${{ secrets.WEBAPP_CONFIG_BOT_TOKEN }}
	# DOMAIN: eyrecovery-${{ inputs.workspace }}.azurewebsites.net
	DOMAIN: eyrecovery-review-pr-${{ github.event.number }}.azurewebsites.net
	steps:
	-
	name: Checkout Code
	uses: actions/checkout@v4
	-
	name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version: 18.x
	cache: npm
	-
	name: Install Chrome
	id: setup-chrome
	uses: browser-actions/setup-chrome@latest
	-
	name: Install pa11y-ci
	env:
	PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: 'true'
	run: \|
	npm install --global --unsafe-perm puppeteer pa11y-ci
	mkdir /tmp/pa11y
	sed -i "s/token/${BOT_TOKEN}/g" .pa11yci
	-
	name: Audit
	env:
	PUPPETEER_EXECUTABLE_PATH: ${{ steps.setup-chrome.outputs.chrome-path }}
	run: pa11y-ci --sitemap https://${DOMAIN}/sitemap.xml > report.txt
	-
	name: Report
	run: cat report.txt && ((`cat report.txt \| grep sign-in \| wc -l`<2)) \|\| exit 1

Provide feedback