Val QA scan — GitHub Action
Run Val, the QA agent for vibecoded apps, on every PR. Val drives a real browser against your preview URL, catches broken links, dead buttons, busted layouts, accessibility violations, and posts a report as a PR comment.
Requires a Val subscription
Val is a paid product. Get a license key at val.nyx-intelligence.com, store it as a repository secret (e.g. VAL_LICENSE_KEY), and pass it to the action.
Quick start
name: Val QA
on: pull_request
jobs:
qa:
runs-on: ubuntu-latest
steps:
- name: Deploy preview
id: deploy
- name: Val scan
uses: nyx-intelligence/val-action@v1
with:
url: ${{ steps.deploy.outputs.url }}
license-key: ${{ secrets.VAL_LICENSE_KEY }}
devices: 'desktop,iPhone 14'
fail-on: 'high'
| Name | Default | Description |
|---|
url | (required) | The URL Val should scan. Pass your preview deployment URL. |
license-key | (required) | Your Val license key (vk_...). Get one at val.nyx-intelligence.com. |
max-pages | 12 | Maximum same-origin pages to crawl. |
devices | desktop | Comma-separated device profiles, e.g. desktop,iPhone 14,Pixel 7. |
fail-on | high | Severity that fails the action: high, medium, low, or never. |
comment | true | Post the report as a PR comment (true / false). |
github-token | ${{ github.token }} | Token used to post the PR comment. |
Outputs
| Name | Description |
|---|
high | Number of high-severity findings. |
medium | Number of medium-severity findings. |
low | Number of low-severity findings. |
report-path | Path to the raw report file. |
What Val checks
- Broken links and 4xx/5xx responses
- Uncaught JS errors and console errors
- Broken/missing images
- Horizontal layout overflow on mobile
- Clipped text in fixed containers
- Cumulative Layout Shift (janky load)
- A11y essentials: missing alt, unnamed buttons, unlabeled inputs, missing
<html lang>
- Multi-device: catches bugs that appear only on mobile or only on desktop
Permissions
The action needs pull-requests: write to post comments:
permissions:
contents: read
pull-requests: write